CVE-2016-10174: NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability
First published: Mon Jan 30 2017(Updated: )
The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Netgear Wnr2000v5 Firmware | <=1.0.0.34 | |
| NETGEAR WNR2000v5 | ||
| NETGEAR WNR2000v5 router | ||
| All of | ||
| Netgear D6100 Firmware | ||
| NETGEAR D6100 | ||
| All of | ||
| Netgear D7000 Firmware | ||
| NETGEAR D7000 | ||
| All of | ||
| Netgear D7800 Firmware | ||
| Netgear D7800 | ||
| All of | ||
| Netgear Jnr1010v2 Firmware | ||
| Netgear Jnr1010v2 | ||
| All of | ||
| Netgear Jnr3300 Firmware | ||
| Netgear Jnr3300 | ||
| All of | ||
| Netgear Jwnr2010v5 Firmware | ||
| Netgear Jwnr2010v5 | ||
| All of | ||
| Netgear R2000 Firmware | ||
| Netgear R2000 | ||
| All of | ||
| Netgear R6100 Firmware | ||
| Netgear R6100 | ||
| All of | ||
| Netgear R6220 Firmware | ||
| NETGEAR R6220 | ||
| All of | ||
| Netgear R7500 Firmware | ||
| Netgear R7500 | ||
| All of | ||
| Netgear R7500v2 Firmware | ||
| Netgear R7500v2 | ||
| All of | ||
| Netgear Wndr3700v4 Firmware | ||
| Netgear Wndr3700v4 | ||
| All of | ||
| Netgear Wndr3800 Firmware | ||
| Netgear Wndr3800 | ||
| All of | ||
| Netgear Wndr4300 Firmware | ||
| Netgear Wndr4300 | ||
| All of | ||
| Netgear Wndr4300v2 Firmware | ||
| Netgear Wndr4300v2 | ||
| All of | ||
| Netgear Wndr4500v3 Firmware | ||
| Netgear Wndr4500v3 | ||
| All of | ||
| Netgear Wndr4700 Firmware | ||
| NETGEAR WNDR4700 | ||
| All of | ||
| Netgear Wnr1000v2 Firmware | ||
| Netgear Wnr1000v2 | ||
| All of | ||
| Netgear Wnr1000v4 Firmware | ||
| Netgear Wnr1000v4 | ||
| All of | ||
| Netgear Wnr2000v3 Firmware | ||
| NETGEAR WNR2000v3 | ||
| All of | ||
| Netgear Wnr2000v4 Firmware | ||
| Netgear Wnr2000v4 | ||
| All of | ||
| Netgear Wnr2000v5 Firmware | ||
| NETGEAR WNR2000v5 | ||
| All of | ||
| Netgear Wnr2020 Firmware | ||
| Netgear Wnr2020 | ||
| All of | ||
| Netgear Wnr2050 Firmware | ||
| Netgear Wnr2050 | ||
| All of | ||
| Netgear Wnr2200 Firmware | ||
| Netgear Wnr2200 | ||
| All of | ||
| Netgear Wnr2500 Firmware | ||
| Netgear Wnr2500 | ||
| All of | ||
| Netgear Wnr614 Firmware | ||
| Netgear WNR614 | ||
| All of | ||
| Netgear Wnr618 Firmware | ||
| Netgear Wnr618 |
Remedy
http://kb.netgear.com/000036549/Insecure-Remote-Access-and-Command-Execution-Security-Vulnerability
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://kb.netgear.com/000036549/Insecure-Remote-Access-and-Command-Execution-Security-Vulnerability
- http://seclists.org/fulldisclosure/2016/Dec/72
- http://www.securityfocus.com/bid/95867
- https://raw.githubusercontent.com/pedrib/PoC/master/advisories/netgear-wnr2000.txt
- https://www.exploit-db.com/exploits/40949/
- https://www.exploit-db.com/exploits/41719/
- https://nvd.nist.gov/vuln/detail/CVE-2016-10174
- collector/nvd-index
- agent/type
- agent/description
- agent/remedy
- agent/title
- agent/weakness
- agent/author
- agent/severity
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/references
- agent/softwarecombine
- agent/event
- agent/tags
- collector/nvd-cve
- vendor/netgear
- canonical/netgear wnr2000v5 firmware
- version/netgear wnr2000v5 firmware/1.0.0.34
- canonical/netgear wnr2000v5
- canonical/netgear d6100 firmware
- canonical/netgear d6100
- canonical/netgear d7000 firmware
- canonical/netgear d7000
- canonical/netgear d7800 firmware
- canonical/netgear d7800
- canonical/netgear jnr1010v2 firmware
- canonical/netgear jnr1010v2
- canonical/netgear jnr3300 firmware
- canonical/netgear jnr3300
- canonical/netgear jwnr2010v5 firmware
- canonical/netgear jwnr2010v5
- canonical/netgear r2000 firmware
- canonical/netgear r2000
- canonical/netgear r6100 firmware
- canonical/netgear r6100
- canonical/netgear r6220 firmware
- canonical/netgear r6220
- canonical/netgear r7500 firmware
- canonical/netgear r7500
- canonical/netgear r7500v2 firmware
- canonical/netgear r7500v2
- canonical/netgear wndr3700v4 firmware
- canonical/netgear wndr3700v4
- canonical/netgear wndr3800 firmware
- canonical/netgear wndr3800
- canonical/netgear wndr4300 firmware
- canonical/netgear wndr4300
- canonical/netgear wndr4300v2 firmware
- canonical/netgear wndr4300v2
- canonical/netgear wndr4500v3 firmware
- canonical/netgear wndr4500v3
- canonical/netgear wndr4700 firmware
- canonical/netgear wndr4700
- canonical/netgear wnr1000v2 firmware
- canonical/netgear wnr1000v2
- canonical/netgear wnr1000v4 firmware
- canonical/netgear wnr1000v4
- canonical/netgear wnr2000v3 firmware
- canonical/netgear wnr2000v3
- canonical/netgear wnr2000v4 firmware
- canonical/netgear wnr2000v4
- canonical/netgear wnr2020 firmware
- canonical/netgear wnr2020
- canonical/netgear wnr2050 firmware
- canonical/netgear wnr2050
- canonical/netgear wnr2200 firmware
- canonical/netgear wnr2200
- canonical/netgear wnr2500 firmware
- canonical/netgear wnr2500
- canonical/netgear wnr614 firmware
- canonical/netgear wnr614
- canonical/netgear wnr618 firmware
- canonical/netgear wnr618
- canonical/netgear wnr2000v5 router