Critical severity9.8CISA KEVNVD Advisory· Published Jan 30, 2017· Updated Jun 17, 2026
CVE-2016-10174
CVE-2016-10174
Description
The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
29- cpe:2.3:o:netgear:d6100_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:d7000_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:d7800_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:jnr1010v2_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:jnr3300_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:jwnr2010v5_firmware:-:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:o:netgear:jwnr2010v5_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:r2000_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:wnr2000v5_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:wnr2020_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:wnr618_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:r6100_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:r6220_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:r7500_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:r7500v2_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:wndr3700v4_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:wndr3800_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:wndr4300_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:wndr4300v2_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:wndr4500v3_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:wndr4700_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:wnr1000v2_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:wnr1000v4_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:wnr2000v3_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:wnr2000v4_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:wnr2050_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:wnr2200_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:wnr2500_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:wnr614_firmware:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
7- seclists.org/fulldisclosure/2016/Dec/72nvdExploitMailing ListThird Party AdvisoryVDB Entry
- raw.githubusercontent.com/pedrib/PoC/master/advisories/netgear-wnr2000.txtnvdExploitTechnical DescriptionThird Party Advisory
- www.exploit-db.com/exploits/40949/nvdExploitThird Party AdvisoryVDB Entry
- www.exploit-db.com/exploits/41719/nvdExploitThird Party AdvisoryVDB Entry
- kb.netgear.com/000036549/Insecure-Remote-Access-and-Command-Execution-Security-VulnerabilitynvdVendor Advisory
- www.securityfocus.com/bid/95867nvdBroken LinkThird Party AdvisoryVDB Entry
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.