Live › vulnerability › CVE-2016-10174
Go to dashboardStack buffer overflow (hidden_lang_avi) in the NETGEAR WNR2000v5 web interface, chainable with the apply_noauth.cgi password-recovery flaws (CVE-2016-10175/10176) for unauthenticated RCE. Reachable from the LAN by default; reachable from the internet only if remote management is enabled (off by default). Public Metasploit module and exploit-db PoC; listed in CISA KEV.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| NETGEAR WNR2000v5 Router | vendor | – | – |
| WNR2000v5 | vendor | <= 1.0.0.34 (1.0.0.34 confirmed vulnerable by Metasploit module); exact first fixed version unknown | 1.0.0.80 (latest; first fixed version not stated by NETGEAR) |
1.0.0.34 or older is vulnerableTurn Remote Management On is ticked, the router is reachable from the WAN1.0.0.80 per NETGEAR's support page (via Advanced > Administration > Firmware Upgrade), and turn off remote management1.0.0.42 release notes say only fixed some security issuesEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.
This page as .md · .json · in your agent: get_signal("CVE-2016-10174")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.