What’s Vulnerable › Vulnerabilities

CVE-2016-11054

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-04-28 · updated 2026-06-17
• Weakness: CWE-78

Description

NETGEAR DGN2200v4 devices before 2017-01-06 are affected by command execution and an FTP insecure root directory.

Affected products

• NETGEAR Dgn2200 Firmware: before 2017-01-06 — fixed in 2017-01-06

How to fix

Upgrade to a fixed version: NETGEAR Dgn2200 Firmware 2017-01-06. Check the vendor advisory for mitigations.

References

• https://kb.netgear.com/31245/DGN2200v4-Command-Execution-and-FTP-Insecure-Root-Directory-Security-Vulnerability
• https://kb.netgear.com/31245/DGN2200v4-Command-Execution-and-FTP-Insecure-Root-Directory-Security-Vulnerability

Get alerted when CVE-2016-11054 or the next vulnerability affects your stack