CVE-2017-6862 NETGEAR Multiple Devices Buffer Overflow
Attackers can bypass authentication and execute arbitrary code on NETGEAR WNR2000 routers via a buffer overflow in the administration web interface.
- Exploited in the wild
- Since 8 Jun 2022
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-6862?
CVE-2017-6862 is a critical memory corruption vulnerability in Netgear Wnr2000 Firmware, published on 26 May 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that uses a parameter in the administration webapp. The NETGEAR ID is PSV-2016-0261.
Weakness: CWE-120
Which versions are affected by CVE-2017-6862?
It affects 1 product.
Products include Netgear Wnr2000 Firmware.
How do I fix CVE-2017-6862?
No fix has been published for CVE-2017-6862 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 22 Jun 2022.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2017-6862 being exploited?
Yes. Attackers have exploited CVE-2017-6862 in the wild since at least 8 Jun 2022.
Other vulnerabilities in Netgear Wnr2000 Firmware
Sources
Also known as GHSA-xjjj-92c2-q84f.