CVE-2016-10174
No fix known ExploitedEPSS 83%CVSS 9.8
The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.
Products: netgear d6100_firmware, netgear d7000_firmware, netgear d7800_firmware, netgear jnr1010v2_firmware, netgear jnr3300_firmware, netgear jwnr2010v5_firmware, netgear r2000_firmware, netgear r6100_firmware, netgear r6220_firmware, netgear r7500_firmware, netgear r7500v2_firmware, netgear wndr3700v4_firmware, netgear wndr3800_firmware, netgear wndr4300_firmware, netgear wndr4300v2_firmware, netgear wndr4500v3_firmware, netgear wndr4700_firmware, netgear wnr1000v2_firmware, netgear wnr1000v4_firmware, netgear wnr2000v3_firmware, netgear wnr2000v4_firmware, netgear wnr2000v5_firmware, netgear wnr2020_firmware, netgear wnr2050_firmware, netgear wnr2200_firmware, netgear wnr2500_firmware, netgear wnr614_firmware, netgear wnr618_firmware