10
CVE-2016-10174
- EPSS 91.84%
- Published 30.01.2017 04:59:00
- Last modified 20.04.2025 01:37:25
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.
Data is provided by the National Vulnerability Database (NVD)
Netgear ≫ D6100 Firmware Version-
Netgear ≫ D7000 Firmware Version-
Netgear ≫ D7800 Firmware Version-
Netgear ≫ Jnr1010v2 Firmware Version-
Netgear ≫ Jnr3300 Firmware Version-
Netgear ≫ Jwnr2010v5 Firmware Version-
Netgear ≫ R2000 Firmware Version-
Netgear ≫ R6100 Firmware Version-
Netgear ≫ R6220 Firmware Version-
Netgear ≫ R7500 Firmware Version-
Netgear ≫ R7500v2 Firmware Version-
Netgear ≫ Wndr3700v4 Firmware Version-
Netgear ≫ Wndr3800 Firmware Version-
Netgear ≫ Wndr4300 Firmware Version-
Netgear ≫ Wndr4300v2 Firmware Version-
Netgear ≫ Wndr4500v3 Firmware Version-
Netgear ≫ Wndr4700 Firmware Version-
Netgear ≫ Wnr1000v2 Firmware Version-
Netgear ≫ Wnr1000v4 Firmware Version-
Netgear ≫ Wnr2000v3 Firmware Version-
Netgear ≫ Wnr2000v4 Firmware Version-
Netgear ≫ Wnr2000v5 Firmware Version-
Netgear ≫ Wnr2020 Firmware Version-
Netgear ≫ Wnr2050 Firmware Version-
Netgear ≫ Wnr2200 Firmware Version-
Netgear ≫ Wnr2500 Firmware Version-
Netgear ≫ Wnr614 Firmware Version-
Netgear ≫ Wnr618 Firmware Version-
25.03.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog
NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability
VulnerabilityThe NETGEAR WNR2000v5 router contains a buffer overflow which can be exploited to achieve remote code execution.
DescriptionApply updates per vendor instructions.
Required actions| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 91.84% | 0.996 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.