Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV N L L N U H H H 8.8 .3763 98.4 YES
AFFECTED Product Versions Fixed n/a n/a – —
TIMELINE Mar 14 Reserved by mitre Sep 18 Added to CISA KEV, remediation due 2023-10-09 Sep 18 Published (CNA: mitre) Aug 3 EXPLOIT PUBLISHED — CVE-2017-6884. Public exploit reference added.
A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vulnerability is located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute arbitrary commands on the router, such as the ping_ip parameter to the expert/maintenance/diagnostic/nslookup URI.
| Date | Event | Detail |
|---|---|---|
| March 14, 2017 | Reserved | Reserved by mitre |
| September 18, 2023 | KEV ADDED | Added to CISA KEV, remediation due 2023-10-09 |
| September 18, 2023 | Published | Published (CNA: mitre) |
| August 3, 2026 | EXPLOIT PUBLISHED | EXPLOIT PUBLISHED — CVE-2017-6884. Public exploit reference added. |
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|---|---|---|---|
| n/a | n/a | — | n/a | — |
Authoritative record: CVE-2017-6884 at cve.org
Weaknesses: CWE-78
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2017-6884 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.