{
    "id": "CVE-2016-10174",
    "published": "2017-01-30 04:59:00",
    "last_modified": "2026-06-17 00:39:12",
    "cvss_score": "9.8",
    "cvss_severity": "CRITICAL",
    "cvss_version": "3.1",
    "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "cwe": "CWE-120",
    "description": "The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.",
    "epss_score": "0.83328",
    "epss_percentile": "0.99672",
    "kev": 1,
    "kev_due": "2022-04-15",
    "has_exploit": 1,
    "updated_at": "2026-09-26 18:20:51",
    "priority": {
        "rank": 1,
        "label": "Patch first",
        "why": "On CISA KEV — known exploited in the wild, due 2022-04-15."
    },
    "products": [
        {
            "vendor": "netgear",
            "product": "d6100"
        },
        {
            "vendor": "netgear",
            "product": "d6100_firmware"
        },
        {
            "vendor": "netgear",
            "product": "d7000"
        },
        {
            "vendor": "netgear",
            "product": "d7000_firmware"
        },
        {
            "vendor": "netgear",
            "product": "d7800"
        },
        {
            "vendor": "netgear",
            "product": "d7800_firmware"
        },
        {
            "vendor": "netgear",
            "product": "jnr1010v2"
        },
        {
            "vendor": "netgear",
            "product": "jnr1010v2_firmware"
        },
        {
            "vendor": "netgear",
            "product": "jnr3300"
        },
        {
            "vendor": "netgear",
            "product": "jnr3300_firmware"
        },
        {
            "vendor": "netgear",
            "product": "jwnr2010v5"
        },
        {
            "vendor": "netgear",
            "product": "jwnr2010v5_firmware"
        },
        {
            "vendor": "netgear",
            "product": "r2000"
        },
        {
            "vendor": "netgear",
            "product": "r2000_firmware"
        },
        {
            "vendor": "netgear",
            "product": "r6100"
        },
        {
            "vendor": "netgear",
            "product": "r6100_firmware"
        },
        {
            "vendor": "netgear",
            "product": "r6220"
        },
        {
            "vendor": "netgear",
            "product": "r6220_firmware"
        },
        {
            "vendor": "netgear",
            "product": "r7500"
        },
        {
            "vendor": "netgear",
            "product": "r7500_firmware"
        },
        {
            "vendor": "netgear",
            "product": "r7500v2"
        },
        {
            "vendor": "netgear",
            "product": "r7500v2_firmware"
        },
        {
            "vendor": "netgear",
            "product": "wndr3700v4"
        },
        {
            "vendor": "netgear",
            "product": "wndr3700v4_firmware"
        },
        {
            "vendor": "netgear",
            "product": "wndr3800"
        },
        {
            "vendor": "netgear",
            "product": "wndr3800_firmware"
        },
        {
            "vendor": "netgear",
            "product": "wndr4300"
        },
        {
            "vendor": "netgear",
            "product": "wndr4300_firmware"
        },
        {
            "vendor": "netgear",
            "product": "wndr4300v2"
        },
        {
            "vendor": "netgear",
            "product": "wndr4300v2_firmware"
        },
        {
            "vendor": "netgear",
            "product": "wndr4500v3"
        },
        {
            "vendor": "netgear",
            "product": "wndr4500v3_firmware"
        },
        {
            "vendor": "netgear",
            "product": "wndr4700"
        },
        {
            "vendor": "netgear",
            "product": "wndr4700_firmware"
        },
        {
            "vendor": "netgear",
            "product": "wnr1000v2"
        },
        {
            "vendor": "netgear",
            "product": "wnr1000v2_firmware"
        },
        {
            "vendor": "netgear",
            "product": "wnr1000v4"
        },
        {
            "vendor": "netgear",
            "product": "wnr1000v4_firmware"
        },
        {
            "vendor": "netgear",
            "product": "wnr2000v3"
        },
        {
            "vendor": "netgear",
            "product": "wnr2000v3_firmware"
        }
    ],
    "kev_detail": {
        "cve_id": "CVE-2016-10174",
        "date_added": "2022-03-25",
        "due_date": "2022-04-15",
        "vendor": "NETGEAR",
        "product": "WNR2000v5 Router",
        "name": "NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability",
        "ransomware": 0
    },
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "41719",
            "title": "Netgear WNR2000v5 - 'hidden_lang_avi' Remote Stack Overflow (Metasploit)",
            "date": "2017-03-24",
            "url": "https://www.exploit-db.com/exploits/41719"
        },
        {
            "source": "exploit-db",
            "ref_id": "40949",
            "title": "Netgear WNR2000v5 - Remote Code Execution",
            "date": "2016-12-21",
            "url": "https://www.exploit-db.com/exploits/40949"
        }
    ],
    "refs_list": [
        "http://kb.netgear.com/000036549/Insecure-Remote-Access-and-Command-Execution-Security-Vulnerability",
        "http://seclists.org/fulldisclosure/2016/Dec/72",
        "http://www.securityfocus.com/bid/95867",
        "https://raw.githubusercontent.com/pedrib/PoC/master/advisories/netgear-wnr2000.txt",
        "https://www.exploit-db.com/exploits/40949/",
        "https://www.exploit-db.com/exploits/41719/",
        "http://kb.netgear.com/000036549/Insecure-Remote-Access-and-Command-Execution-Security-Vulnerability",
        "http://seclists.org/fulldisclosure/2016/Dec/72",
        "http://www.securityfocus.com/bid/95867",
        "https://raw.githubusercontent.com/pedrib/PoC/master/advisories/netgear-wnr2000.txt",
        "https://www.exploit-db.com/exploits/40949/",
        "https://www.exploit-db.com/exploits/41719/",
        "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-10174"
    ]
}