Critical severity · published Jan 30, 2017
CVE-2016-10174
NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability
In wildKEV
9.8
CVSS
83.3%
EPSS
Yes
On KEV
Description
The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)83.3% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Mar 25, 2022
Federal remediation dueApr 15, 2022
Ransomware campaign useNot known
Affected products
Which versions
DF
D6100 Firmware · Netgear
All versions, or not specified · source: NVD
DF
D7000 Firmware · Netgear
All versions, or not specified · source: NVD
DF
D7800 Firmware · Netgear
All versions, or not specified · source: NVD
JF
Jnr1010v2 Firmware · Netgear
All versions, or not specified · source: NVD
JF
Jnr3300 Firmware · Netgear
All versions, or not specified · source: NVD
JF
Jwnr2010v5 Firmware · Netgear
All versions, or not specified · source: NVD
RF
R2000 Firmware · Netgear
All versions, or not specified · source: NVD
RF
R6100 Firmware · Netgear
All versions, or not specified · source: NVD
RF
R6220 Firmware · Netgear
All versions, or not specified · source: NVD
RF
R7500 Firmware · Netgear
All versions, or not specified · source: NVD
RF
R7500v2 Firmware · Netgear
All versions, or not specified · source: NVD
WF
Wndr3700v4 Firmware · Netgear
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-10174
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-10174
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
x_refsource_MISC
http://seclists.org/fulldisclosure/2016/Dec/72
x_refsource_MISC
https://raw.githubusercontent.com/pedrib/PoC/master/advisories/netgear-wnr2000.txt
vdb-entry
http://www.securityfocus.com/bid/95867
exploit
https://www.exploit-db.com/exploits/41719/
x_refsource_MISC
http://kb.netgear.com/000036549/Insecure-Remote-Access-and-Command-Execution-Security-Vulnerability
exploit
https://www.exploit-db.com/exploits/40949/
More from D6100 Firmware
8.8
CVE-2018-21220
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker
8.8
CVE-2018-21219
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker
8.8
CVE-2018-21218
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker
8.8
CVE-2018-21217
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker
8.8
CVE-2018-21216
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker