Critical severity · published Jan 30, 2017
CVE-2016-10175
The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI
9.8
CVSS
65.5%
EPSS
No
On KEV
Description
The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI. This serial number allows a user to obtain the administrator username and password, when used in combination with the CVE-2016-10176 vulnerability that allows resetting the answers to the password-recovery questions.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)65.5% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WF
Wnr2000v5 Firmware · Netgear
through 1.0.0.34 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-10175
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-10175
Patch
http://kb.netgear.com/000036549/Insecure-Remote-Access-and-Command-Execution-Security-Vulnerability
Exploit
http://seclists.org/fulldisclosure/2016/Dec/72
Third Party Advisory
http://www.securityfocus.com/bid/95867
Exploit
https://raw.githubusercontent.com/pedrib/PoC/master/advisories/netgear-wnr2000.txt
www.exploit-db.com
https://www.exploit-db.com/exploits/40949/
More from Wnr2000v5 Firmware
9.8
CVE-2016-10174
NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability
9.8
CVE-2021-45658
Certain NETGEAR devices are affected by server-side injection
9.8
CVE-2021-45619
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker
9.8
CVE-2021-45618
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker
9.8
CVE-2020-35799
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker