What’s Vulnerable › Vulnerabilities

CVE-2016-10174: NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2022-03-25
• EPSS: 83.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-01-30 · updated 2026-06-17
• Weakness: CWE-120

Description

The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.

Affected products

• NETGEAR D6100 Firmware: all versions
• NETGEAR D7000 Firmware: all versions
• NETGEAR D7800 Firmware: all versions
• NETGEAR Jnr1010V2 Firmware: all versions
• NETGEAR Jnr3300 Firmware: all versions
• NETGEAR Jwnr2010V5 Firmware: all versions
• NETGEAR R2000 Firmware: all versions
• NETGEAR R6100 Firmware: all versions
• NETGEAR R6220 Firmware: all versions
• NETGEAR R7500 Firmware: all versions
• NETGEAR R7500V2 Firmware: all versions
• NETGEAR Wndr3700V4 Firmware: all versions
• NETGEAR Wndr3800 Firmware: all versions
• NETGEAR Wndr4300 Firmware: all versions
• NETGEAR Wndr4300V2 Firmware: all versions
• NETGEAR Wndr4500V3 Firmware: all versions
• NETGEAR Wndr4700 Firmware: all versions
• NETGEAR Wnr1000V2 Firmware: all versions
• NETGEAR Wnr1000V4 Firmware: all versions
• NETGEAR Wnr2000V3 Firmware: all versions
• NETGEAR Wnr2000V4 Firmware: all versions
• NETGEAR Wnr2000V5 Firmware: all versions
• NETGEAR Wnr2020 Firmware: all versions
• NETGEAR Wnr2050 Firmware: all versions
• NETGEAR Wnr2200 Firmware: all versions
• NETGEAR Wnr2500 Firmware: all versions
• Netgear WNR614: all versions
• NETGEAR Wnr618 Firmware: all versions

References

• http://kb.netgear.com/000036549/Insecure-Remote-Access-and-Command-Execution-Security-Vulnerability
• http://seclists.org/fulldisclosure/2016/Dec/72
• http://www.securityfocus.com/bid/95867
• https://raw.githubusercontent.com/pedrib/PoC/master/advisories/netgear-wnr2000.txt
• https://www.exploit-db.com/exploits/40949/
• https://www.exploit-db.com/exploits/41719/
• http://kb.netgear.com/000036549/Insecure-Remote-Access-and-Command-Execution-Security-Vulnerability
• http://seclists.org/fulldisclosure/2016/Dec/72
• http://www.securityfocus.com/bid/95867
• https://raw.githubusercontent.com/pedrib/PoC/master/advisories/netgear-wnr2000.txt
• https://www.exploit-db.com/exploits/40949/
• https://www.exploit-db.com/exploits/41719/

Get alerted when CVE-2016-10174 or the next vulnerability affects your stack