CVE-2017-6862: NETGEAR Multiple Devices Buffer Overflow Vulnerability

Vulnerability summary

CVE-2017-6862 is a critical (CVSS 9.8) Classic Buffer Overflow vulnerability in NETGEAR Multiple Devices. It is known to be exploited: CISA lists it, first on 08-06-2022. EPSS estimates a 45.75% chance of exploitation in the next 30 days, higher than 98.7% of scored vulnerabilities.

Timeline

1. 26-05-2017
   PublishedVulnerability first disclosed.
2. 08-06-2022
   Added to CISA KEVExploitedNETGEAR Multiple Devices Buffer Overflow Vulnerability
3. 22-06-2022
   CISA remediation dueDeadline passedApply updates per vendor instructions.
4. 21-10-2025
   Last modifiedVulnerability information updated.

Description

NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that uses a parameter in the administration webapp. The NETGEAR ID is PSV-2016-0261.

• CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.