NETGEAR · WNR2000v5 Router
CVE-2016-10174
NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability
Exploited in attacks
Critical 9.8 Attack chance: 83%
What it is
The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.
CISA: The NETGEAR WNR2000v5 router contains a buffer overflow which can be exploited to achieve remote code execution.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: April 15, 2022
- Added to the CISA list
- March 25, 2022
- Published
- January 30, 2017
- Severity
- Critical 9.8 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- 83% in the top 0.3% of all known vulnerabilities
- Weakness
- CWE-119
- More details
- NVD · CVE.org · CISA
All references (6)
- http://seclists.org/fulldisclosure/2016/Dec/72
- https://raw.githubusercontent.com/pedrib/PoC/master/advisories/netgear-wnr2000.txt
- http://www.securityfocus.com/bid/95867
- https://www.exploit-db.com/exploits/41719/
- http://kb.netgear.com/000036549/Insecure-Remote-Access-and-Command-Execution-Security-Vulnerability
- https://www.exploit-db.com/exploits/40949/
More exploited flaws from NETGEAR
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Sep 8, 2022 | Exposure of Sensitive Information | Multiple Devices | High 8.1 | 89% |
| Jun 8, 2022 | Buffer Overflow | Multiple Devices | Critical 9.8 | 46% |
| Mar 25, 2022 | Multiple WAP Devices Command Injection | Wireless Access Point (WAP) Devices | Critical 9.8 | 98% |
| Mar 25, 2022 | OS Command Injection | DGN2200 Devices | High 8.8 | 73% |
| Mar 7, 2022 | Remote Code Execution | Multiple Routers | High 8.8 | 99.8% |
| Mar 7, 2022 | DGN2200 Remote Code Execution | Wireless Router DGN2200 | Critical 9.8 | 69% |
| Nov 3, 2021 | Missing Function Level Access Control | JGS516PE Devices | Critical 9.8 | 57% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.