What is CVE-2016-10176?

CVE-2016-10176 is a critical-severity vulnerability in NETGEAR Wnr2000v5, classified under Improper Input Validation. CVSS score: 9.8/10. Published 2017-01-30.

How severe is CVE-2016-10176?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Is CVE-2016-10176 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in NETGEAR Wnr2000v5

CVE-2016-10176

The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the device. This special URL is handled by the embedded web server (uhttpd) and processed accordingly. The web server also contains another URL, apply_noauth.cgi, that allows an unauthenticated user to perform sensitive actions on the device. This functionality can be exploited to change the router settings (such as the answers to the password-recovery questions) and achieve remote code execution.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

Published 2017-01-30 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.774 (99.6th percentile), scored 2026-10-18.

High probability of exploitation in the next 30 days — patch promptly. 100th percentile — 99.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.776 · newest: 0.774 · change: -0.002

Affected products

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

rapid7/metasploit-framework

References

seclists.org/fulldisclosure/2016/Dec/72 (Exploit, VDB Entry, Third Party Advisory)
raw.githubusercontent.com/pedrib/PoC/master/advisories/netgear-wnr2000.txt (Technical Description, Exploit, Third Party Advisory)
www.securityfocus.com/bid/95867 (VDB Entry, Third Party Advisory, vdb-entry)
kb.netgear.com/000036549/Insecure-Remote-Access-and-Command-Execution-Security-… (Patch, Vendor Advisory)
www.exploit-db.com/exploits/40949/ (exploit)

Frequently asked questions

What is CVE-2016-10176?: CVE-2016-10176 is a critical-severity vulnerability in NETGEAR Wnr2000v5, classified under Improper Input Validation. CVSS score: 9.8/10. Published 2017-01-30.
How severe is CVE-2016-10176?: Critical severity. CVSS v3 base score is 9.8 out of 10.
Is CVE-2016-10176 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.