Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2016-10175
HistoryJan 30, 2017 - 4:59 a.m.

CVE-2016-10175

2017-01-3004:59:00
CWE-200
mitre
web.nvd.nist.gov
22
cve-2016-10175
netgear
router
serial number
vulnerability

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.1

Confidence

High

EPSS

0.296

Percentile

96.9%

JSON

The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI. This serial number allows a user to obtain the administrator username and password, when used in combination with the CVE-2016-10176 vulnerability that allows resetting the answers to the password-recovery questions.

Affected configurations

Nvd
Node
netgearwnr2000v5_firmwareRange≤1.0.0.34
AND
netgearwnr2000v5Match-
VendorProductVersionCPE
netgearwnr2000v5_firmware*cpe:2.3:o:netgear:wnr2000v5_firmware:*:*:*:*:*:*:*:*
netgearwnr2000v5-cpe:2.3:h:netgear:wnr2000v5:-:*:*:*:*:*:*:*

Related

prion 2
packetstorm 1
nvd 2
cvelist 2
metasploit 1
exploitdb 1
openvas 1
cve 1
checkpoint_advisories 1
prion
prion
Design/Logic Flaw
2017-01-30 04:59:00
Remote code execution
2017-01-30 04:59:00
packetstorm
packetstorm
NETGEAR WNR2000v5 Administrator Password Recovery
2024-08-31 00:00:00
nvd
nvd
CVE-2016-10175
2017-01-30 04:59:00
CVE-2016-10176
2017-01-30 04:59:00
cvelist
cvelist
CVE-2016-10175
2017-01-30 04:24:00
CVE-2016-10176
2017-01-30 04:24:00
metasploit
metasploit
NETGEAR WNR2000v5 Administrator Password Recovery
2016-12-27 21:12:35
exploitdb
exploitdb
Netgear WNR2000v5 - Remote Code Execution
2016-12-21 00:00:00
openvas
openvas
NETGEAR WNR2000 Router Multiple Vulnerabilities
2016-12-30 00:00:00
cve
cve
CVE-2016-10176
2017-01-30 04:59:00
checkpoint_advisories
checkpoint_advisories
NETGEAR WNR2000 Authentication Bypass (CVE-2016-10176)
2018-05-24 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.1

Confidence

High

EPSS

0.296

Percentile

96.9%

JSON
Related for CVE-2016-10175
prion2packetstorm1nvd2cvelist2metasploit1exploitdb1openvas1cve1checkpoint_advisories1