# CVE-2016-10174: NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability

Source: https://junglewise.ai/threats/cve-2016-10174-netgear-wnr2000v5-router-buffer-overflow-vulnerability  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2022-03-25. Updated: 2026-05-10  
License: CC BY 4.0 with a link back

CVE-2016-10174 · Severity: critical · CVSS 9.8 · Exploited in the wild · Published 2022-03-25

The NETGEAR WNR2000v5 router and several other models contain a buffer overflow in the hidden_lang_avi parameter when invoking the /apply.cgi?/lang_check.html URL. This vulnerability allows an unauthenticated remote attacker to execute arbitrary code.

Technologies: [NETGEAR WNR2000v5](https://junglewise.ai/threats/technologies/wnr2000v5). Vendors: [NETGEAR](https://junglewise.ai/threats/vendors/netgear).

## Quick answers

**Is CVE-2016-10174 exploited in the wild?** Yes. CVE-2016-10174 is known to be exploited in the wild, first recorded on 25 March 2022. Treat it as urgent.

**How severe is CVE-2016-10174?** Critical severity, with a CVSS score of 9.8, published 25 March 2022.

**Which products and versions are affected?** NETGEAR WNR2000v5; NETGEAR D6100; NETGEAR D7000; NETGEAR D7800; and 7 more.

**Is there a fix for CVE-2016-10174?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2016-10174 attacked?** It is attacked over the network, in device firmware.

**Am I affected by CVE-2016-10174?** Check whether you run NETGEAR WNR2000v5 or NETGEAR Wnr2000v5 Router. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- NETGEAR WNR2000v5
- NETGEAR D6100
- NETGEAR D7000
- NETGEAR D7800
- NETGEAR JNR1010v2
- NETGEAR JNR3300
- NETGEAR JWNR2010v5
- NETGEAR R2000
- NETGEAR R6100
- NETGEAR R6220
- NETGEAR R7500

## Timeline

- 2016-12-20: disclosed: Public disclosure via Seclists FD
- 2022-03-25: kev added: Added to CISA Known Exploited Vulnerabilities Catalog

## Related threats

- [NETGEAR WNR2000 authentication bypass and RCE in uhttpd](https://junglewise.ai/threats/cve-2016-10176-netgear-wnr2000-authentication-bypass-and-rce-in-uhttpd)
- [NETGEAR WNR2000 information disclosure in BRS_netgear_success.html](https://junglewise.ai/threats/cve-2016-10175-netgear-wnr2000-information-disclosure-in-brs-netgear-success)