CVE-2016-10175

The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI

published January 30, 2017

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.3th percentile for exploit probability.

CVSS
โ€”
EPSS
66%
Percentile
99.3
In the wild
Unconfirmed
What it is

โš ๏ธ A simple request could unmask your router's serial number! One vulnerable endpoint on the NETGEAR WNR2000v5 router reveals this sensitive info, making it a potential goldmine for attackers. ๐Ÿ” Think of it as a delivery truck leaking its license plate number every time it makes a stop. Just like a savvy thief could use that number to track down the owner, an attacker can exploit this serial number to break into your router's admin panel. If an attacker snags your router's serial number, they can combine it with another vulnerability to reset admin passwords! This could lead to unauthorized access to your network, putting your private data and connected devices at serious risk.

Put simply

Think of it as a delivery truck leaking its license plate number every time it makes a stop. Just like a savvy thief could use that number to track down the owner, an attacker can exploit this serial number to break into your router's admin panel. This vulnerability occurs when the NETGEAR WNR2000v5 router leaks its serial number through the '/BRS_netgear_success.html' URI, which can be exploited in conjunction with CVE-2016-10176 to gain admin access.

What to do

If an attacker snags your router's serial number, they can combine it with another vulnerability to reset admin passwords! This could lead to unauthorized access to your network, putting your private data and connected devices at serious risk. To protect your network, consider updating the firmware of your NETGEAR WNR2000v5 router to the latest version available. Additionally, regularly auditing your router's settings and disabling unnecessary features can help safeguard against exploitation. You've got this! With just a few steps, you can shore up your defenses and keep your network secure. ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.65541 ยท 99.3th percentile
Published
2017-01-30T04:24Z
EPSS history
Timeline
  • 30 JAN 04:24Z
    The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI
    cvelistv5