CVE-2016-10174criticalunder attackCWE-120

CVE-2016-10174

Published · Updated

Follow this CVE+ Monitor WNR2000v5 Router

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 83%
from disclosure to weaponsame day
Published on NVDJan 30
1st PoCDec 21
metasploitDec 20
CISA KEV+1880d
Action required by CISAfederal deadline: 2022-04-15

Apply updates per vendor instructions.

In short

A NETGEAR router has a dangerous flaw where an attacker can send specially crafted data to crash the router or run malicious code without needing a password. This happens through a web parameter that doesn't properly check input size.

Technical detail

The WNR2000v5 router is vulnerable to unauthenticated buffer overflow via the hidden_lang_avi parameter in /apply.cgi?/lang_check.html, allowing remote code execution (CWE-120). Pre-condition: network access to the device's web interface. Impact: complete device compromise without authentication.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.