NETGEAR WNR618 Firmware vulnerabilities

3 CVEs affecting NETGEAR WNR618 Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-11057, published 2020-04-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-10174: NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability, published 2017-01-30. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 83.3% chance of exploitation in the next 30 days. The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated…
CVE-2016-11057, published 2020-04-28. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by mishandling of repeated URL calls. This affects JNR1010v2 before 2017-01-06, WNR614 before 2017-01-06, WNR618 before 2017-01-06, JWNR2000v5 before 2017-01-06,…
CVE-2017-18791, published 2020-04-21. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by CSRF. This affects R6050/JR6150 before 1.0.1.7, PR2000 before 1.0.0.17, R6220 before 1.1.0.50, WNDR3700v5 before 1.1.0.48, JNR1010v2 before 1.1.0.40,…