NETGEAR WNR1000V2 Firmware vulnerabilities

2 CVEs affecting NETGEAR WNR1000V2 Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-23110, published 2023-02-02.

More from NETGEAR.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-10174: NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability, published 2017-01-30. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 83.3% chance of exploitation in the next 30 days. The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated…
• CVE-2023-23110, published 2023-02-02. High severity, CVSS 7.4. EPSS: 0.6% chance of exploitation in the next 30 days. An exploitable firmware modification vulnerability was discovered in certain Netgear products. The data integrity of the uploaded firmware image is ensured with a fixed checksum number. Therefore, an…