Actively exploited · Published Jan 30, 2017 · Assigned by mitre

CVE-2016-10174

Critical 9.8 Exploited

In plain English

A critical-severity buffer overflow in WNR2000v5 Router from NETGEAR. Attackers are actively exploiting it in the wild (listed by CISA on March 25, 2022). The chance it is exploited in the next 30 days is estimated at 83.3% (higher than 99.7% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit. Apply updates per vendor instructions.

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)83.3%top 0.3% of all CVEs

Exploited in the wildYesCISA KEV since Mar 25, 2022

Attack tooling1Metasploit

CISA guidance

Apply updates per vendor instructions.

Federal agencies must remediate by Apr 15, 2022.

Official description

The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

Weakness: CWE-120 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

http://seclists.org/fulldisclosure/2016/Dec/72 x_refsource_MISC
https://raw.githubusercontent.com/pedrib/PoC/master/advisories/netgear-wnr2000.txt x_refsource_MISC
95867 vdb-entry, x_refsource_BID
41719 exploit, x_refsource_EXPLOIT-DB
http://kb.netgear.com/000036549/Insecure-Remote-Access-and-Command-Execution-Security-Vulnerability x_refsource_MISC
40949 exploit, x_refsource_EXPLOIT-DB
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-10174 government-resource