CVE-2017-6862

No fix known ExploitedEPSS 46%CVSS 9.8

NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that uses a parameter in the administration webapp. The NETGEAR ID is PSV-2016-0261.

Published 2017-05-26 · In CISA KEV since 2022-06-08 · CVE record · OSV

Products: netgear wnr2000_firmware