Vulnerability Details : CVE-2016-10174

Products affected by CVE-2016-10174

CVE-2016-10174 is in the CISA Known Exploited Vulnerabilities Catalog

Metasploit modules for CVE-2016-10174

• NETGEAR WNR2000v5 (Un)authenticated hidden_lang_avi Stack Buffer Overflow

  Disclosure Date: 2016-12-20

  First seen: 2020-04-26

  exploit/linux/http/netgear_wnr2000_rce

  The NETGEAR WNR2000 router has a stack buffer overflow vulnerability in the hidden_lang_avi parameter. In order to exploit it, it is necessary to guess the value of a certain timestamp which is in the configuration of the router. An authenticated attacker can simply

  More information

CVSS scores for CVE-2016-10174

CWE ids for CVE-2016-10174

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
  The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
  Assigned by: nvd@nist.gov (Primary)
• CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
  The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.
  Assigned by:

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
  • nvd@nist.gov (Primary)

References for CVE-2016-10174