Read the docs
TI-2017-04600 Aliases CVE-2017-6862GHSA-xjjj-92c2-q84f

Buffer overflow in NETGEAR All versions prior to WNR2000v3 1.1.2.14, WNR2000v4 1.0.0.66…

Priority CRITICAL 100Exploited in the wildCWE-120Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-120 and the CVSS impact.

Summary

NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that uses a parameter in the administration webapp. The NETGEAR ID is PSV-2016-0261.

Why it matters now

Exploitation Active In CISA KEV since 2022-06-08CISA due date 2022-06-22
EPSS 0.45748 98th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Active
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—NETGEAR All versions prior to WNR2000v3 1.1.2.14, WNR2000v4 1.0.0.66, WNR2000v5 1.0.0.42NETGEAR All versions prior to WNR2000v3 1.1.2.14, WNR2000v4 1.0.0.66, WNR2000v5 1.0.0.42—No fix listedCNA
  • NETGEAR All versions prior to WNR2000v3 1.1.2.14, WNR2000v4 1.0.0.66, WNR2000v5 1.0.0.42 Vendor— Affected NETGEAR All versions prior to WNR2000v3 1.1.2.14, WNR2000v4 1.0.0.66, WNR2000v5 1.0.0.42 Fixed in — No fix listed CNA

CPE configurations NVD · 6

CPEVersionsRoleVendor
cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:*before 1.0.0.42VulnerableNETGEAR
cpe:2.3:h:netgear:wnr2000:v5:*:*:*:*:*:*:*v5Running onNETGEAR
cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:*before 1.0.0.66VulnerableNETGEAR
cpe:2.3:h:netgear:wnr2000:v4:*:*:*:*:*:*:*v4Running onNETGEAR
cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:*before 1.1.2.14VulnerableNETGEAR
cpe:2.3:h:netgear:wnr2000:v3:*:*:*:*:*:*:*v3Running onNETGEAR
  • cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:* Versions before 1.0.0.42 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:wnr2000:v5:*:*:*:*:*:*:* Versions v5 Running on ·NETGEAR
  • cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:* Versions before 1.0.0.66 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:wnr2000:v4:*:*:*:*:*:*:* Versions v4 Running on ·NETGEAR
  • cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:* Versions before 1.1.2.14 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:wnr2000:v3:*:*:*:*:*:*:* Versions v3 Running on ·NETGEAR

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2022-06-08 Added to CISA KEV
  2. 2026-10-02 Threatist record created from CVE-2017-6862
  3. 2026-10-03 Alias added: GHSA-xjjj-92c2-q84f

References

Advisory 1

Other 1

  • TI-2023-27381 A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. CVSS 3.1CRITICAL 9.8
  • TI-2018-15115 Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. CVSS 3.1CRITICAL 9.8
  • TI-2017-13916 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. CVSS 3.1HIGH 8.8
  • TI-2017-13914 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. CVSS 3.1HIGH 8.8
  • TI-2017-13892 Certain NETGEAR devices are affected by a stack-based buffer overflow by an… CVSS 3.1HIGH 8.8
  • TI-2018-15186 Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. CVSS 3.1HIGH 8.8
See all 92 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences