CVE-2016-10175: netgear wnr2000v5_firmware
Vulnerability summary
CVE-2016-10175 is a critical (CVSS 9.8) vulnerability in netgear wnr2000v5_firmware. EPSS estimates a 65.54% chance of exploitation in the next 30 days, higher than 99.2% of scored vulnerabilities. 4 public exploits are recorded.
Timeline
- 30-01-2017PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI. This serial number allows a user to obtain the administrator username and password, when used in combination with the CVE-2016-10176 vulnerability that allows resetting the answers to the password-recovery questions.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
65.54%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
+0.56 pp
From 64.98% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
4 foundExploit Reference (seclists.org)
Maturity: unknown
Exploit Reference (raw.githubusercontent.com)
Maturity: unknown
Netgear WNR2000v5 - Remote Code Execution
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Netgear1 product
- wnr2000v5_firmware≤ 1.0.0.34
1 vendor · 1 product
References
5 links- raw.githubusercontent.com/pedrib/PoC/master/advisories/netgear-wnr2000.txtX Refsource MISCExploitTechnical DescriptionThird Party Advisory
- kb.netgear.com/000036549/Insecure-Remote-Access-and-Command-Execution-Security-VulnerabilityX Refsource MISCPatchVendor Advisory