CRITICAL🚩 CISA KEV⚡ EXPLOIT🇵🇱 Wersja polska

CVE-2016-10174

CVSS 9.8v3.1pub. 2017-01-30upd. 2026-04-21

The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Netgear D6100

    HW
    Netgear
    all versions

  • Netgear D6100 Firmware

    OS
    Netgear
    all versions

  • Netgear D7000

    HW
    Netgear
    all versions

  • Netgear D7000 Firmware

    OS
    Netgear
    all versions

  • Netgear D7800

    HW
    Netgear
    all versions

  • Netgear D7800 Firmware

    OS
    Netgear
    all versions

  • Netgear Jnr1010v2

    HW
    Netgear
    all versions

  • Netgear Jnr1010v2 Firmware

    OS
    Netgear
    all versions

  • Netgear Jnr3300

    HW
    Netgear
    all versions

  • Netgear Jnr3300 Firmware

    OS
    Netgear
    all versions

  • Netgear Jwnr2010v5

    HW
    Netgear
    all versions

  • Netgear Jwnr2010v5 Firmware

    OS
    Netgear
    all versions

  • Netgear R2000

    HW
    Netgear
    all versions

  • Netgear R2000 Firmware

    OS
    Netgear
    all versions

  • Netgear R6100

    HW
    Netgear
    all versions

  • Netgear R6100 Firmware

    OS
    Netgear
    all versions

  • Netgear R6220

    HW
    Netgear
    all versions

  • Netgear R6220 Firmware

    OS
    Netgear
    all versions

  • Netgear R7500

    HW
    Netgear
    all versions

  • Netgear R7500 Firmware

    OS
    Netgear
    all versions

  • Netgear R7500v2

    HW
    Netgear
    all versions

  • Netgear R7500v2 Firmware

    OS
    Netgear
    all versions

  • Netgear Wndr3700v4

    HW
    Netgear
    all versions

  • Netgear Wndr3700v4 Firmware

    OS
    Netgear
    all versions

  • Netgear Wndr3800

    HW
    Netgear
    all versions

  • Netgear Wndr3800 Firmware

    OS
    Netgear
    all versions

  • Netgear Wndr4300

    HW
    Netgear
    all versions

  • Netgear Wndr4300 Firmware

    OS
    Netgear
    all versions

  • Netgear Wndr4300v2

    HW
    Netgear
    all versions

  • Netgear Wndr4300v2 Firmware

    OS
    Netgear
    all versions

CISA KEV — detailsi

Vendori
NETGEAR
Producti
WNR2000v5 Router
Added to KEVi
March 25, 2022
Remediation deadline (US Federal)i
April 15, 2022(overdue)
Required action (CISA)i

Apply updates per vendor instructions.

CISA descriptioni

The NETGEAR WNR2000v5 router contains a buffer overflow which can be exploited to achieve remote code execution.

🔴
IMMEDIATE ACTION
Actively exploited in the wild (CISA KEV). Patch immediately.
⏰CISA DEADLINE: 15 kwietnia 2022
Tags
RCEAuth BypassMemory
CWE
References

Related vulnerabilities

CVE-2025-29044CRITICAL9.8PL ✓same product

Buffer overflow w Netgear R6100 umożliwiający zdalne wykonanie kodu

CVE-2022-37232CRITICAL9.8PL ✓same product

Buffer overflow w Netgear WNR2000v4 via uhttpd (strcpy)

CVE-2022-31937CRITICAL9.8PL ✓same product

Stack overflow w routerze Netgear N300 WNR2000v4 via strcpy w uhttpd

CVE-2021-45618CRITICAL9.6PL ✓same product

NETGEAR — unauthenticated command injection w routerach i extenderach

CVE-2021-45496CRITICAL9.1PL ✓same product

Authentication Bypass w urządzeniach NETGEAR D7000