Published: 30/01/2017 Updated: 03/09/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI. This serial number allows a user to obtain the administrator username and password, when used in combination with the CVE-2016-10176 vulnerability that allows resetting the answers to the password-recovery questions.

Vulnerable Product	Search on Vulmon	Subscribe to Product
netgear wnr2000v5_firmware

# # Remote code execution in NETGEAR WNR2000v5 # - by Pedro Ribeiro (pedrib@gmailcom) / Agile Information Security # Released on 20/12/2016 # # NOTE: this exploit is "alpha" quality and has been deprecated Please see the modules # accepted into the Metasploit framework, or githubcom/pedrib/PoC/tree/master/exploits/metasploit/wnr2000 # # ...

CWE-200 https://raw.githubusercontent.com/pedrib/PoC/master/advisories/netgear-wnr2000.txt http://seclists.org/fulldisclosure/2016/Dec/72 http://kb.netgear.com/000036549/Insecure-Remote-Access-and-Command-Execution-Security-Vulnerability http://www.securityfocus.com/bid/95867 https://www.exploit-db.com/exploits/40949/https://nvd.nist.gov https://www.exploit-db.com/exploits/40949/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2016-10175

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect