CVE-2016-10174

Known Exploited Vulnerability

NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability

Vendor / product: NETGEAR / WNR2000v5 Router

Description

The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.

Weakness classification

• CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Primary references

• cve@mitre.org — Vendor Advisory
• cve@mitre.org — Exploit, Mailing List, Third Party Advisory, VDB Entry
• cve@mitre.org — Broken Link, Third Party Advisory, VDB Entry
• cve@mitre.org — Exploit, Technical Description, Third Party Advisory
• cve@mitre.org — Exploit, Third Party Advisory, VDB Entry
• cve@mitre.org — Exploit, Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Mailing List, Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Technical Description, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry