CVE-2016-10175
CriticalSummary
The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI. This serial number can be used to obtain the administrator username and password in conjunction with the CVE-2016-10176 vulnerability that allows resetting the answers to the password-recovery questions.
Risk Assessment
The leakage of the router's serial number poses a risk of unauthorized access to the administrative panel, potentially leading to device takeover.
Recommendation
It is recommended to update the router's firmware and secure access to the administrative panel with strong passwords and additional protective measures.
Original NVD description (English source)
The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI. This serial number allows a user to obtain the administrator username and password, when used in combination with the CVE-2016-10176 vulnerability that allows resetting the answers to the password-recovery questions.