EDB-40949

PoC

Netgear WNR2000v5 - Remote Code Execution

view exploit source exploit_dbtype remoteauthor Pedro Ribeiropublished 2016-12-21catalog exploit_db

exploited CVEs (3)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2016-10176US	critical9.8	77.4% (100th)	Exploit	2017-01-30
The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the device. This special URL is handled by the…
CVE-2016-10175US	critical9.8	65.5% (99th)	Exploit	2017-01-30
The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI. This serial number allows a user to obtain the administrator us…
CVE-2016-10174US	critical9.8OT critical	83.3% (100th)	KEV	2017-01-30
The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.