CVE-2017-6862
NETGEAR Multiple Devices Buffer Overflow Vulnerability
Published May 26, 2017 · updated Jun 16, 2026 · netgear wnr2000 firmware
NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that uses a parameter in the administration webapp. The NETGEAR ID is PSV-2016-0261.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
May 26, 2017 · Catalog
Detected
NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that uses a parameter in the administration webapp. The NETGEAR ID is PSV-2016-0261.
Jun 8, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Jun 22, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that uses a parameter in the administration webapp. The NETGEAR ID is PSV-2016-0261.
Required action
Apply updates per vendor instructions.
CISA due date Jun 22, 2022
Affected
- cpe netgear/wnr2000 firmwareversion unspecified
- vendor NETGEAR Multiple Devicesversion unspecified
Sources
- CISA KEVConfirmed exploitationCVE-2017-6862
Multiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution.
cisa.gov - CVE.orgVulnerability recordCVE-2017-6862
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2017-6862
30-day exploitation probability 45.7%
first.org - NIST NVDVulnerability recordCVE-2017-6862
NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that uses a parameter in the administration webapp. The NETGEAR ID is PSV-2016-0261.
nvd.nist.gov