Critical severity · published May 26, 2017
CVE-2017-6862
NETGEAR Multiple Devices Buffer Overflow Vulnerability
In wildKEV
9.8
CVSS
45.7%
EPSS
Yes
On KEV
Description
NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that uses a parameter in the administration webapp. The NETGEAR ID is PSV-2016-0261.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)45.7% · higher than 99% of CVEs
Exploited in the wildYes
CISA KEVListed Jun 8, 2022
Federal remediation dueJun 22, 2022
Ransomware campaign useNot known
Affected products
Which versions
NA
NETGEAR All versions prior to WNR2000v3 1.1.2.14, WNR2000v4 1.0.0.66, WNR2000v5 1.0.0.42 ·
NETGEAR All versions prior to WNR2000v3 1.1.2.14, WNR2000v4 1.0.0.66, WNR2000v5 1.0.0.42 · source: vendor
WF
Wnr2000 Firmware · Netgear
before 1.0.0.42; before 1.0.0.66; before 1.1.2.14 · source: NVD
MD
Multiple Devices · NETGEAR
All versions, or not specified · source: KEV
Affected product
NA
NETGEAR All versions prior to WNR2000v3 1.1.2.14, WNR2000v4 1.0.0.66, WNR2000v5 1.0.0.42
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-6862
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-6862
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
x_refsource_CONFIRM
https://kb.netgear.com/000038542/Security-Advisory-for-Unauthenticated-Remote-Code-Execution-on-Some-Routers-PSV-2016-0261
vdb-entry
http://www.securityfocus.com/bid/98740
x_refsource_MISC
https://www.on-x.com/sites/default/files/on-x_-_security_advisory_-_netgear_wnr2000v5_-_cve-2017-6862.pdf