cvedb.io
CVE-2016-10175
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2017-01-30T04:59:00.203 · Last modified 2026-06-17T00:39:12.930

Summary

The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI. This serial number allows a user to obtain the administrator username and password, when used in combination with the CVE-2016-10176 vulnerability that allows resetting the answers to the password-recovery questions.

Affected products

netgear — wnr2000v5_firmware

Does this affect you?

Add your gear to cvedb and we'll alert you only when netgear ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.