What’s Vulnerable › Vulnerabilities
CVE-2017-6862: NETGEAR Multiple Devices Buffer Overflow Vulnerability
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: yes — in CISA KEV since 2022-06-08
- EPSS: 45.7% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2017-05-26 · updated 2026-06-17
- Weakness: CWE-120
Description
NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that uses a parameter in the administration webapp. The NETGEAR ID is PSV-2016-0261.
Affected products
- NETGEAR Wnr2000 Firmware: before 1.0.0.42; before 1.0.0.66; before 1.1.2.14 — fixed in 1.0.0.42, 1.0.0.66, 1.1.2.14
How to fix
Upgrade to a fixed version: NETGEAR Wnr2000 Firmware 1.0.0.42, 1.0.0.66, 1.1.2.14. Check the vendor advisory for mitigations.
References
- http://www.securityfocus.com/bid/98740
- https://kb.netgear.com/000038542/Security-Advisory-for-Unauthenticated-Remote-Code-Execution-on-Some-Routers-PSV-2016-0261
- https://www.on-x.com/sites/default/files/on-x_-_security_advisory_-_netgear_wnr2000v5_-_cve-2017-6862.pdf
- http://www.securityfocus.com/bid/98740
- https://kb.netgear.com/000038542/Security-Advisory-for-Unauthenticated-Remote-Code-Execution-on-Some-Routers-PSV-2016-0261
- https://www.on-x.com/sites/default/files/on-x_-_security_advisory_-_netgear_wnr2000v5_-_cve-2017-6862.pdf
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6862
Get alerted when CVE-2017-6862 or the next vulnerability affects your stack