NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability

KRITISCH 9.8EXPLOITED (CISA KEV)CVE-2016-10174 · Published 30/01/2017 · updated 17/06/2026

NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 25/03/2022. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
WNR2000v5 Router NETGEAR	Versions not published yet (product named by CISA KEV)

Description

The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.

References

kb.netgear.com/000036549/Insecure-Remote-Access-and-Command-Execution-Security-Vulnerability · Vendor Advisory
seclists.org/fulldisclosure/2016/Dec/72 · Exploit
securityfocus.com/bid/95867 · Broken Link
raw.githubusercontent.com/pedrib/PoC/master/advisories/netgear-wnr2000.txt · Exploit
exploit-db.com/exploits/40949 · Exploit
exploit-db.com/exploits/41719 · Exploit
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2016-10174

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free