ZeroDay Findings
Sign inSign up

Findings

CVE-2016-10174

NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability

Published Jan 29, 2017 · updated Jun 16, 2026 · netgear d6100 firmware

The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.

Timeline

Detection, updates, and resolution for this record.

  1. Jan 29, 2017 · Catalog

    Detected

    The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.

  2. Mar 25, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Apr 15, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.

Required action

Apply updates per vendor instructions.

CISA due date Apr 15, 2022

Affected

  • cpe netgear/d6100 firmwareversion unspecified
  • cpe netgear/d7000 firmwareversion unspecified
  • cpe netgear/d7800 firmwareversion unspecified
  • cpe netgear/jnr1010v2 firmwareversion unspecified
  • cpe netgear/jnr3300 firmwareversion unspecified
  • cpe netgear/jwnr2010v5 firmwareversion unspecified
  • cpe netgear/r2000 firmwareversion unspecified
  • cpe netgear/r6100 firmwareversion unspecified
  • cpe netgear/r6220 firmwareversion unspecified
  • cpe netgear/r7500 firmwareversion unspecified
  • cpe netgear/r7500v2 firmwareversion unspecified
  • cpe netgear/wndr3700v4 firmwareversion unspecified
  • vendor NETGEAR WNR2000v5 Routerversion unspecified

Sources

  • CISA KEVCVE-2016-10174

    The NETGEAR WNR2000v5 router contains a buffer overflow which can be exploited to achieve remote code execution.

    cisa.gov
  • CVE.orgCVE-2016-10174

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2016-10174

    30-day exploitation probability 83.3%

    first.org
  • Exploit Database40949

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Exploit Database41719

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Metasploit Modulesexploit_linux/http/netgear_wnr2000_rce

    Public module reference (excellent). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDCVE-2016-10174

    The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.

    nvd.nist.gov

References