Live › vulnerability › CVE-2017-6862
Go to dashboardBuffer overflow in the web admin interface of NETGEAR WNR2000v3, v4, v5 and R2000 routers. It gives unauthenticated authentication bypass and command execution. Exploitable from the LAN, or from the internet if remote management is on (off by default). CISA lists it as exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| NETGEAR Multiple Devices | vendor | – | – |
| WNR2000v3 | vendor | < 1.1.2.14 | 1.1.2.14 |
| WNR2000v4 | vendor | < 1.0.0.66 | 1.0.0.66 |
| WNR2000v5 | vendor | < 1.0.0.42 | 1.0.0.42 |
| R2000 | vendor | unknown | – |
| netgear wnr2000 firmware | vendor | < 1.0.0.42 | 1.0.0.42 |
| netgear wnr2000 firmware | vendor | < 1.0.0.66 | 1.0.0.66 |
| netgear wnr2000 firmware | vendor | < 1.1.2.14 | 1.1.2.14 |
1.1.2.14 or later, WNR2000v4 1.0.0.66 or later, WNR2000v5 1.0.0.42 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that uses a parameter in the administration webapp. The NETGEAR ID is PSV-2016-0261.
This page as .md · .json · in your agent: get_signal("CVE-2017-6862")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.