CVE-2017-6862criticalunder attackCWE-120

CVE-2017-6862: critical vulnerability in NETGEAR All versions prior to WNR2000v3…

Published · Updated

Follow this CVE+ Monitor All versions prior to WNR2000v3 1.1.2.14, WNR2000v4 1.0.0.66, WNR2000v5

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

70Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 9.8epss 46%
from disclosure to weapon
Published on NVDMay 26
CISA KEV+1839d
Action required by CISAfederal deadline: 2022-06-22

Apply updates per vendor instructions.

In short

NETGEAR WNR2000 routers have a critical flaw that allows attackers to bypass login and take complete control of the device by sending specially crafted requests to the administration interface. This affects versions before 1.1.2.14 (v3), 1.0.0.66 (v4), and 1.0.0.42 (v5).

Technical detail

A stack-based buffer overflow exists in the NETGEAR WNR2000 administration webapp parameter handling, enabling unauthenticated remote code execution. The vulnerability requires only network access to the device's web interface and no user interaction; successful exploitation grants full administrative control regardless of authentication credentials.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that uses a parameter in the administration webapp. The NETGEAR ID is PSV-2016-0261.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · NETGEAR All versions prior to WNR2000v3 1.1.2.14, WNR2000v4 1.0.0.66, WNR2000v5 1.0.0.42