CVE-2017-6862

🗓️ 26 May 2017 20:00:00Reported by netgearType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 982 Views

NETGEAR WNR2000v3/v4/v5 authentication bypass and remote code execution via buffer overflow

Reporter	Title	Published	Views	Family All 14
ICS	People’s Republic of China State-Sponsored Cyber Actors Exploit Network Providers and Devices	10 Jun 202212:00	–	ics
ATTACKERKB	CVE-2017-6862	26 May 201700:00	–	attackerkb
BDU FSTEC	The vulnerability of the microprogrammed software of the WNR2000v3, WNR2000v4, WNR2000v5, and R2000 routers lies in the execution of operations outside the buffer in memory, allowing an attacker to execute arbitrary code.	29 Jun 202200:00	–	bdu_fstec
Circl	CVE-2017-6862	11 May 201718:16	–	circl
CISA KEV Catalog	NETGEAR Multiple Devices Buffer Overflow Vulnerability	8 Jun 202200:00	–	cisa_kev
CNVD	Netgear WNR2000\R2000 Series Buffer Overflow Vulnerability	4 May 201700:00	–	cnvd
Check Point Advisories	Netgear Routers Buffer Overflow (CVE-2017-6862)	20 Jun 202200:00	–	checkpoint_advisories
Cvelist	CVE-2017-6862	26 May 201720:00	–	cvelist
Tenable Nessus	NETGEAR WNR2000 RCE (PSV-2016-0261)	13 Mar 202300:00	–	nessus
NVD	CVE-2017-6862	26 May 201720:29	–	nvd

NVD

Node

netgear wnr2000_firmwareRange<1.0.0.42

AND

netgear wnr2000Matchv5

Node

netgear wnr2000_firmwareRange<1.0.0.66

AND

netgear wnr2000Matchv4

Node

netgear wnr2000_firmwareRange<1.1.2.14

AND

netgear wnr2000Matchv3

[
  {
    "product": "NETGEAR All versions prior to WNR2000v3 1.1.2.14, WNR2000v4 1.0.0.66, WNR2000v5 1.0.0.42",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "NETGEAR All versions prior to WNR2000v3 1.1.2.14, WNR2000v4 1.0.0.66, WNR2000v5 1.0.0.42"
      }
    ]
  }
]

Source	Link
kb	www.kb.netgear.com/000038542/Security-Advisory-for-Unauthenticated-Remote-Code-Execution-on-Some-Routers-PSV-2016-0261
securityfocus	www.securityfocus.com/bid/98740
on-x	www.on-x.com/sites/default/files/on-x_-_security_advisory_-_netgear_wnr2000v5_-_cve-2017-6862.pdf
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

17 Jun 2026 01:23Current

10High risk

Vulners AI Score10

CVSS 27.5

CVSS 3.19.8

EPSS0.42696

SSVC