CVE-2016-10174 The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated....
CriticalCVSS 9.8
EPSS 83.3%
CISA KEV
added 2022-03-25 · due 2022-04-15
Exploited in the wild
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.
CISA Known Exploited Vulnerability
- Date added
- 2022-03-25
- Due date (FCEB)
- 2022-04-15
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netgear d6100 firmware | All versions | No fix listed |
| netgear d7000 firmware | All versions | No fix listed |
| netgear d7800 firmware | All versions | No fix listed |
| netgear jnr1010v2 firmware | All versions | No fix listed |
| netgear jnr3300 firmware | All versions | No fix listed |
| netgear jwnr2010v5 firmware | All versions | No fix listed |
| netgear r2000 firmware | All versions | No fix listed |
| netgear r6100 firmware | All versions | No fix listed |
| netgear r6220 firmware | All versions | No fix listed |
| netgear r7500 firmware | All versions | No fix listed |
| netgear r7500v2 firmware | All versions | No fix listed |
| netgear wndr3700v4 firmware | All versions | No fix listed |
| netgear wndr3800 firmware | All versions | No fix listed |
| netgear wndr4300 firmware | All versions | No fix listed |
| netgear wndr4300v2 firmware | All versions | No fix listed |
| netgear wndr4500v3 firmware | All versions | No fix listed |
| netgear wndr4700 firmware | All versions | No fix listed |
| netgear wnr1000v2 firmware | All versions | No fix listed |
| netgear wnr1000v4 firmware | All versions | No fix listed |
| netgear wnr2000v3 firmware | All versions | No fix listed |
| netgear wnr2000v4 firmware | All versions | No fix listed |
| netgear wnr2000v5 firmware | All versions | No fix listed |
| netgear wnr2020 firmware | All versions | No fix listed |
| netgear wnr2050 firmware | All versions | No fix listed |
| netgear wnr2200 firmware | All versions | No fix listed |
Show 3 more
| Product | Affected versions | Fixed in |
|---|---|---|
| netgear wnr2500 firmware | All versions | No fix listed |
| netgear wnr614 firmware | All versions | No fix listed |
| netgear wnr618 firmware | All versions | No fix listed |
References
- kb.netgear.com vendor-advisory
- seclists.org exploit mailing-list third-party-advisory vdb-entry
- 95867 broken-link third-party-advisory vdb-entry
- raw.githubusercontent.com exploit technical-description third-party-advisory
- 40949 exploit third-party-advisory vdb-entry
- 41719 exploit third-party-advisory vdb-entry
- www.cisa.gov government-resource us-government-resource