ByteOS Network

NVD Vulnerability Details :

CVE-2017-6862

Deferred

Known KEV

More Info Official Page

Source-a2826606-91e7-4eb6-899e-8484bd4575d5

View Known Exploited Vulnerability (KEV) details

Published At-26 May, 2017 | 20:29

Updated At-20 Apr, 2025 | 01:37

NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that uses a parameter in the administration webapp. The NETGEAR ID is PSV-2016-0261.

CISA Catalog

Date Added	Due Date	Vulnerability Name	Required Action
2022-06-08	2022-06-22	NETGEAR Multiple Devices Buffer Overflow Vulnerability	Apply updates per vendor instructions.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

NETGEAR, Inc.

>>wnr2000v5_firmware>>Versions before 1.0.0.42(exclusive)

cpe:2.3:o:netgear:wnr2000v5_firmware:*:*:*:*:*:*:*:*

NETGEAR, Inc.

>>wnr2000v5>>-

cpe:2.3:h:netgear:wnr2000v5:-:*:*:*:*:*:*:*

NETGEAR, Inc.

>>wnr2000v4_firmware>>Versions before 1.0.0.66(exclusive)

cpe:2.3:o:netgear:wnr2000v4_firmware:*:*:*:*:*:*:*:*

NETGEAR, Inc.

>>wnr2000v4>>-

cpe:2.3:h:netgear:wnr2000v4:-:*:*:*:*:*:*:*

NETGEAR, Inc.

>>wnr2000v3_firmware>>Versions before 1.1.2.14(exclusive)

cpe:2.3:o:netgear:wnr2000v3_firmware:*:*:*:*:*:*:*:*

NETGEAR, Inc.

>>wnr2000v3>>-

cpe:2.3:h:netgear:wnr2000v3:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-120	Primary	nvd@nist.gov
CWE-120	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/98740	a2826606-91e7-4eb6-899e-8484bd4575d5	Broken Link Third Party Advisory VDB Entry
https://kb.netgear.com/000038542/Security-Advisory-for-Unauthenticated-Remote-Code-Execution-on-Some-Routers-PSV-2016-0261	a2826606-91e7-4eb6-899e-8484bd4575d5	Vendor Advisory
https://www.on-x.com/sites/default/files/on-x_-_security_advisory_-_netgear_wnr2000v5_-_cve-2017-6862.pdf	a2826606-91e7-4eb6-899e-8484bd4575d5	Broken Link
http://www.securityfocus.com/bid/98740	af854a3a-2127-422b-91ae-364da2661108	Broken Link Third Party Advisory VDB Entry
https://kb.netgear.com/000038542/Security-Advisory-for-Unauthenticated-Remote-Code-Execution-on-Some-Routers-PSV-2016-0261	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://www.on-x.com/sites/default/files/on-x_-_security_advisory_-_netgear_wnr2000v5_-_cve-2017-6862.pdf	af854a3a-2127-422b-91ae-364da2661108	Broken Link

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History