CN

CyberNewsUz

Threat Intelligence Portal

LOADING0%

Yangiliklar CVE Tracker Exploitlar Hujumlar Xarita

CN

CyberNewsUz

Threat Intelligence Portal

LOADING0%

O'zbek tilidagi kiberxavfsizlik portali. Yangiliklar, CVE tracker, hujumlar bazasi.

Yangiliklar

Barcha yangiliklar
Hujumlar
Zayifliklar
O'zbekiston
Jahon

Asboblar

CVE Tracker
Exploit DB
Hujumlar bazasi
Threat xarita

Loyiha

Biz haqimizda

© 2026 CyberNewsUz. Barcha huquqlar himoyalangan.

CVE Tracker ga qaytish

CVE-2016-10174

Kritik(9.8)

NETGEAR WNR2000v5 marshrutizatori /apply.cgi?/lang_check.html URL manzilini chaqirganda hidden_lang_avi parametrida bufer to'lib ketishini o'z ichiga oladi. Ushbu bufer to'lib ketishidan kodni masofadan bajarish uchun autentifikatsiya qilinmagan tajovuzkor foydalanishi mumkin.

Vendor

Netgear

Product

D6100 Firmware

CVSS Score

9.8

Nashr sanasi

30-yan, 2017

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Manbalar

http://kb.netgear.com/000036549/Insecure-Remote-Access-and-Command-Execution-Security-Vulnerability
http://seclists.org/fulldisclosure/2016/Dec/72
http://www.securityfocus.com/bid/95867
https://raw.githubusercontent.com/pedrib/PoC/master/advisories/netgear-wnr2000.txt
https://www.exploit-db.com/exploits/40949/

Yangi kritik zaifliklar

CyberNewsUz — CVE-2016-10174