NETGEAR WNR2000V4 Firmware vulnerabilities

3 CVEs affecting NETGEAR WNR2000V4 Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-37232, published 2022-09-23.

More from NETGEAR.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-10174: NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability, published 2017-01-30. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 83.3% chance of exploitation in the next 30 days. The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated…
• CVE-2022-37232, published 2022-09-23. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Netgear N300 wireless router wnr2000v4-V1.0.0.70 is vulnerable to Buffer Overflow via uhttpd. There is a stack overflow vulnerability caused by strcpy.
• CVE-2022-31937, published 2022-09-22. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Netgear N300 wireless router wnr2000v4-V1.0.0.70 was discovered to contain a stack overflow via strcpy in uhttpd.