NETGEAR WNR2000v5 Router Buffer Overflow

What to do

1. Check which version of D6100 Firmware you run against the affected versions below, and install the vendor's latest release.
2. CISA's required action: Apply updates per vendor instructions.
3. Read the advisory on kb.netgear.com for workarounds and exact fixed builds.
4. Until you can update, restrict network access to the affected service so it is not reachable from untrusted networks.

Affected products and versions

Version data comes from NVD's product matching; 3 further products are omitted here. Confirm against the vendor advisory before deciding you are unaffected.

How the severity score breaks down

Attack vector

NetworkCan be exploited remotely over a network, including the internet.

Attack complexity

LowNo special conditions are needed; the attack works reliably.

Privileges required

NoneNo account or login is needed.

User interaction

NoneNo action by a victim is required.

Scope

UnchangedImpact stays within the vulnerable component.

Confidentiality

HighAll data handled by the component can be read.

Integrity

HighData or code can be modified at will.

Availability

HighThe component can be taken down completely.

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. Scored by NVD.

Official description

The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.

Source: the CVE record as published by its numbering authority, via NVD and CVE.org.

The underlying weakness: Buffer Copy without Checking Size of Input

Timeline

1. January 30, 2017CVE record published.
2. March 25, 2022Added to CISA's Known Exploited Vulnerabilities catalogue.
3. April 15, 2022Deadline for US federal agencies to remediate, set by CISA.
4. February 4, 2025CISA published its SSVC assessment (exploitation: active, automatable: yes, technical impact: total).
5. June 17, 2026Record last changed materially (score, affected products, status or references).

References

Other vulnerabilities in D6100 Firmware

• 7.4 High severity

  Wnr612v2 Firmware: Download of Code Without Integrity Check

  CVE-2023-23110Feb 2, 2023NETGEAR

Recent Buffer Copy without Checking Size of Input vulnerabilities

• 8.8 High severity

  Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Exploited

  CVE-2016-6366Aug 18, 2016CiscoEPSS 87.6%
• 7.8 High severity

  Microsoft Windows Secondary Logon Service Privilege Escalation Exploited

  CVE-2016-0099Mar 9, 2016MicrosoftEPSS 37%
• 7.8 High severity

  Microsoft Office Buffer Overflow Exploited

  CVE-2013-1331Jun 12, 2013MicrosoftEPSS 79.8%
• 7.8 High severity

  Adobe Reader Buffer Overflow Exploited

  CVE-2013-0641Feb 14, 2013AdobeEPSS 32.3%
• 7.8 High severity

  Microsoft PowerPoint Buffer Overflow Exploited

  CVE-2010-2572Nov 10, 2010MicrosoftEPSS 58.6%
• 7.8 High severity

  Adobe Acrobat and Reader Buffer Overflow Exploited

  CVE-2007-5659Feb 12, 2008AdobeEPSS 87.3%

Spotted an error? Tell us.