CVE-2016-10174

🗓️ 30 Jan 2017 04:24:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 1024 Views🌐 WEB

NETGEAR WNR2000v5 router buffer overflow in hidden_lang_avi parameter /apply.cgi?/lang_check.htm

Reporter	Title	Published	Views	Family All 19
zdt	NETGEAR WNR2000v5 - (Un)authenticated hidden_lang_avi Stack Overflow Exploit	25 Mar 201700:00	–	zdt
ATTACKERKB	CVE-2016-10174	30 Jan 201700:00	–	attackerkb
BDU FSTEC	The vulnerability of the “/apply.cgi?/lang_check.html” component of the NETGEAR WNR2000v5 router’s embedded software allows a hacker to execute arbitrary code.	14 Dec 201700:00	–	bdu_fstec
Circl	CVE-2016-10174	24 Mar 201700:00	–	circl
CISA KEV Catalog	NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability	25 Mar 202200:00	–	cisa_kev
CNVD	NETGEAR WNR2000v5 router hidden_lang_avi buffer overflow vulnerability	6 Feb 201700:00	–	cnvd
Check Point Advisories	NETGEAR WNR2000v5 Remote Code Execution (CVE-2016-10174)	25 Mar 201900:00	–	checkpoint_advisories
Cvelist	CVE-2016-10174	30 Jan 201704:24	–	cvelist
Exploit DB	Netgear WNR2000v5 - Remote Code Execution	21 Dec 201600:00	–	exploitdb
Exploit DB	Netgear WNR2000v5 - 'hidden_lang_avi' Remote Stack Overflow (Metasploit)	24 Mar 201700:00	–	exploitdb

NVD

Node

AND

netgear d6100_firmwareMatch-

netgear d6100Match-

Node

AND

netgear d7000_firmwareMatch-

netgear d7000Match-

Node

AND

netgear d7800_firmwareMatch-

netgear d7800Match-

Node

AND

netgear jnr1010v2_firmwareMatch-

netgear jnr1010v2Match-

Node

AND

netgear jnr3300_firmwareMatch-

netgear jnr3300Match-

Node

AND

netgear jwnr2010v5_firmwareMatch-

netgear jwnr2010v5Match-

Node

AND

netgear r2000_firmwareMatch-

netgear r2000Match-

Node

AND

netgear r6100_firmwareMatch-

netgear r6100Match-

Node

AND

netgear r6220_firmwareMatch-

netgear r6220Match-

Node

AND

netgear r7500_firmwareMatch-

netgear r7500Match-

Node

AND

netgear r7500v2_firmwareMatch-

netgear r7500v2Match-

Node

AND

netgear wndr3700v4_firmwareMatch-

netgear wndr3700v4Match-

Node

AND

netgear wndr3800_firmwareMatch-

netgear wndr3800Match-

Node

AND

netgear wndr4300_firmwareMatch-

netgear wndr4300Match-

Node

AND

netgear wndr4300v2_firmwareMatch-

netgear wndr4300v2Match-

Node

AND

netgear wndr4500v3_firmwareMatch-

netgear wndr4500v3Match-

Node

AND

netgear wndr4700_firmwareMatch-

netgear wndr4700Match-

Node

AND

netgear wnr1000v2_firmwareMatch-

netgear wnr1000v2Match-

Node

AND

netgear wnr1000v4_firmwareMatch-

netgear wnr1000v4Match-

Node

AND

netgear wnr2000v3_firmwareMatch-

netgear wnr2000v3Match-

Node

AND

netgear wnr2000v4_firmwareMatch-

netgear wnr2000v4Match-

Node

AND

netgear wnr2000v5_firmwareMatch-

netgear wnr2000v5Match-

Node

AND

netgear wnr2020_firmwareMatch-

netgear wnr2020Match-

Node

AND

netgear wnr2050_firmwareMatch-

netgear wnr2050Match-

Node

AND

netgear wnr2200_firmwareMatch-

netgear wnr2200Match-

Node

AND

netgear wnr2500_firmwareMatch-

netgear wnr2500Match-

Node

AND

netgear wnr614_firmwareMatch-

netgear wnr614Match-

Node

AND

netgear wnr618_firmwareMatch-

netgear wnr618Match-

Source	Link
raw	www.raw.githubusercontent.com/pedrib/PoC/master/advisories/netgear-wnr2000.txt
securityfocus	www.securityfocus.com/bid/95867
kb	www.kb.netgear.com/000036549/Insecure-Remote-Access-and-Command-Execution-Security-Vulnerability
seclists	www.seclists.org/fulldisclosure/2016/Dec/72
exploit-db	www.exploit-db.com/exploits/41719/
exploit-db	www.exploit-db.com/exploits/40949/
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
hidden_lang_avi	path	apply.cgi?/lang_check.html	Buffer overflow in hidden_lang_avi parameter can be triggered via the lang_check.html endpoint.	CWE-120
timestamp	query param	apply_noauth.cgi?/lang_check.html	Unauthenticated exploitation path using a timestamp parameter to reach the vulnerable hidden_lang_avi payload.	CWE-120

17 Jun 2026 00:39Current

9.9High risk

Vulners AI Score9.9

CVSS 3.19.8

CVSS 210

EPSS0.8345

SSVC