Netgear Wnr2000V4 Firmware vulnerabilities

3 known vulnerabilities affecting netgear/wnr2000v4_firmware.

Total CVEs

3

CISA KEV

1

actively exploited

Public exploits

0

Exploited in wild

1

Severity breakdown

CRITICAL3

Vulnerabilities

Page 1 of 1

CVE-2022-37232CRITICALCVSS 9.8v1.0.0.702022-09-23

CVE-2022-37232 [CRITICAL] CWE-787 CVE-2022-37232: Netgear N300 wireless router wnr2000v4-V1.0.0.70 is vulnerable to Buffer Overflow via uhttpd. There Netgear N300 wireless router wnr2000v4-V1.0.0.70 is vulnerable to Buffer Overflow via uhttpd. There is a stack overflow vulnerability caused by strcpy.

CVE-2022-31937CRITICALCVSS 9.8v1.0.0.702022-09-22

CVE-2022-31937 [CRITICAL] CWE-787 CVE-2022-31937: Netgear N300 wireless router wnr2000v4-V1.0.0.70 was discovered to contain a stack overflow via strc Netgear N300 wireless router wnr2000v4-V1.0.0.70 was discovered to contain a stack overflow via strcpy in uhttpd.

CVE-2017-6862CRITICALCVSS 9.8KEVfixed in 1.0.0.662017-05-26

CVE-2017-6862 [CRITICAL] CWE-120 CVE-2017-6862: NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that uses a parameter in the administration webapp. The NETGEAR ID is PSV-2016-0261.