Buffer Overflow Vulnerability in Netgear Router

CVE-2025-4116

What is CVE-2025-4116?

A buffer overflow vulnerability has been identified in the Netgear JWNR2000v2 router's 'get_cur_lang_ver' function. This issue arises from improper handling of the 'host' argument, potentially allowing an attacker to execute arbitrary code remotely. The vulnerability poses a significant risk as it enables exploitation without requiring local access to the device. Despite proactive communications with the vendor regarding this vulnerability, there has been no response or remediation provided.

References