CVE-2016-10174 NETGEAR WNR2000v5 Router Buffer Overflow
Unauthenticated attackers can achieve remote code execution via a buffer overflow in the NETGEAR WNR2000v5 router's language check parameter.
- Exploited in the wild
- Since 25 Mar 2022
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-10174?
CVE-2016-10174 is a critical memory corruption vulnerability in Netgear D6100 Firmware, published on 30 Jan 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.
Weakness: CWE-120
Which versions are affected by CVE-2016-10174?
It affects 28 products.
Products include Netgear D6100 Firmware, Netgear D7000 Firmware, Netgear D7800 Firmware, Netgear Jnr1010v2 Firmware, Netgear Jnr3300 Firmware, Netgear Jwnr2010v5 Firmware and 22 more.
How do I fix CVE-2016-10174?
No fix has been published for CVE-2016-10174 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 15 Apr 2022.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2016-10174 being exploited?
Yes. Attackers have exploited CVE-2016-10174 in the wild since at least 25 Mar 2022.
Public exploit code: 1 Metasploit module and 2 Exploit-DB entries.
Other vulnerabilities in Netgear D6100 Firmware
Sources
Also known as GHSA-rgmj-9q73-5phf.