CVE-2016-10174 in netgear d6100 firmware
LogPulse has a published detection rule for this CVE: it raises a notable when someone tries to exploit it.
What the vulnerability is
The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.
Affected software: netgear d6100 firmware, netgear d7000 firmware, netgear d7800 firmware, netgear jnr1010v2 firmware, netgear jnr3300 firmware, netgear jwnr2010v5 firmware, netgear r2000 firmware, netgear r6100 firmware, netgear r6220 firmware, netgear r7500 firmware
Scores
- CVSS: 9.8 (critical)
- EPSS: 83.33% chance of exploitation in the next 30 days
- CISA KEV: Known exploited, listed 2022-03-25
- Published: 2017-01-30
What LogPulse has for it
- Detection rule: Yes, published
- Agent check (vulnerable version): No
- Mitigation: No
Source data: NIST NVD, CISA KEV and FIRST EPSS. LogPulse processes new CVEs every hour.
We build every detection with great care, but no two environments are the same. Log sources, parsing and configuration differ, so test a detection in your own environment before you rely on it.