Wnr2000 Firmware vulnerabilities

3 known vulnerabilities in Wnr2000 Firmware from NETGEAR. 3 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Wnr2000 Firmware: Improper Neutralization of Special Elements used in a Command

  CVE-2023-50089Dec 15, 2023NETGEAREPSS 4.01%

  A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication.

• 8.1 High severity

  Wnr2000 Firmware: Download of Code Without Integrity Check

  CVE-2022-46423Dec 20, 2022NETGEAR

  An exploitable firmware modification vulnerability was discovered on the Netgear WNR2000v1 router. An attacker can conduct a MITM (Man-in-the-Middle) attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbi

• 9.8 Critical severity

  NETGEAR Multiple Devices Buffer Overflow Exploited

  CVE-2017-6862May 26, 2017NETGEAR All versions prior to WNR2000v3 1.1.2.14, WNR2000v4 1.0.0.66, WNR2000v5 1.0.0.42EPSS 45.7%

  NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that uses a parameter in the administration webapp. The NETGEAR ID i