Remote Information Disclosure in NETGEAR Router

CVE-2016-10175

Summary

The NETGEAR WNR2000v5 router contains a vulnerability that exposes its serial number through a specific request. This leak can potentially allow an attacker to exploit other vulnerabilities to retrieve the administrator credentials. By coupling this information leakage with additional vectors, such as the ability to reset password recovery questions, attackers could gain unauthorized access to the device's administrative functions.

References