NETGEAR WNDR4300V2 Firmware vulnerabilities

2 CVEs affecting NETGEAR WNDR4300V2 Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-26913, published 2020-10-09.

More from NETGEAR.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-10174: NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability, published 2017-01-30. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 83.3% chance of exploitation in the next 30 days. The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated…
• CVE-2020-26913, published 2020-10-09. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.63, R7800 before 1.0.2.60, R8900 before 1.0.4.26, R9000 before…