ZeroDay Findings
Sign inSign up

Findings

CVE-2017-6862

NETGEAR Multiple Devices Buffer Overflow Vulnerability

Published May 26, 2017 · updated Jun 16, 2026 · netgear wnr2000 firmware

NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that uses a parameter in the administration webapp. The NETGEAR ID is PSV-2016-0261.

Timeline

Detection, updates, and resolution for this record.

  1. May 26, 2017 · Catalog

    Detected

    NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that uses a parameter in the administration webapp. The NETGEAR ID is PSV-2016-0261.

  2. Jun 8, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Jun 22, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that uses a parameter in the administration webapp. The NETGEAR ID is PSV-2016-0261.

Required action

Apply updates per vendor instructions.

CISA due date Jun 22, 2022

Affected

  • cpe netgear/wnr2000 firmwareversion unspecified
  • vendor NETGEAR Multiple Devicesversion unspecified

Sources

  • CISA KEVCVE-2017-6862

    Multiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution.

    cisa.gov
  • CVE.orgCVE-2017-6862

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2017-6862

    30-day exploitation probability 45.7%

    first.org
  • NIST NVDCVE-2017-6862

    NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that uses a parameter in the administration webapp. The NETGEAR ID is PSV-2016-0261.

    nvd.nist.gov

References

CVE-2017-6862 · ZeroDay Findings