# CASCA evidence receipt — CVE-2016-10174

- Generation: `gen-409cbd0c74ff4feb70e4944e6b98ce40`
- As known: 2026-07-21T08:13:17.697275+00:00
- Comparison: gen-56ccdaf914f7b4be95b689ccae7dc20d
- Score policy: public-priority-v1.0.1
- Conflict: present

## Source assertions

- **CISA-ADP** (independent_enrichment): container — CISA ADP Vulnrichment
  - Observed: 2026-07-19T04:27:06.398189+00:00
  - Citation: https://www.cve.org/CVERecord?id=CVE-2016-10174
- **CVE** (derivative_copy): container — CVE Program Container
  - Observed: 2026-07-19T04:27:06.398189+00:00
  - Citation: https://www.cve.org/CVERecord?id=CVE-2016-10174
- **mitre** (original_assertion): container — The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.
  - Observed: 2026-07-19T04:27:06.398189+00:00
  - Citation: https://www.cve.org/CVERecord?id=CVE-2016-10174
- **CISA KEV** (original_assertion): observed_exploitation — NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability
  - Observed: 2026-07-19T04:54:04.25158+00:00
  - Citation: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- **FIRST EPSS** (original_assertion): model_probability — Probability 0.834500000000; percentile 0.996520000000
  - Observed: 2026-07-19T04:54:35.756809+00:00
  - Citation: https://www.first.org/epss/data_stats.html

## CVSS assessments

- **nvd@nist.gov** (Primary, CVSS 3.1): 9.8 — score eligible
  - Evidence class: nvd_enrichment_exact; source rank: 0
  - Validation: valid_match
  - Vector: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
- **nvd@nist.gov** (Primary, CVSS 2.0): 10 — score eligible
  - Evidence class: nvd_enrichment_exact; source rank: 0
  - Validation: valid_match
  - Vector: `AV:N/AC:L/Au:N/C:C/I:C/A:C`
- **134c704f-9b21-4f2e-91b3-4a467353bcc0** (Secondary, CVSS 3.1): 9.8 — score eligible
  - Evidence class: registered_adp_or_other; source rank: 2
  - Validation: valid_match
  - Vector: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
- **CISA-ADP** (unknown, CVSS 3.1): 9.8 — display only
  - Evidence class: direct_cve_record_display_only; source rank: not applicable
  - Validation: display-only direct record assessment
  - Vector: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`

## Applicability scope

- **n/a · n/a** (direct_source; unknown)
  - Versions: [{"status": "affected", "version": "n/a"}]
- **netgear · d6100** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-e819d986713af85c12186e708945b604f007530945d57bc7486d63c208add256`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:d6100:-:*:*:*:*:*:*:*`
- **netgear · d6100_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-de68a5bb6076ac6bdaa566d12885befeca18179d6e2b05609f2208fea393b381`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:d6100_firmware:-:*:*:*:*:*:*:*`
- **netgear · d7000** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-4625af6b646bd3dc9d703ad49fcf4c56899d9ff99675612f88edbe31b11cb606`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:d7000:-:*:*:*:*:*:*:*`
- **netgear · d7000_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-ef33086914238e014b84ca85efe2484da2cd04f829069057d1b2e6681629712f`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:d7000_firmware:-:*:*:*:*:*:*:*`
- **netgear · d7800** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-ae002f05030935001e45acfa1367235e8f0be7c663e7c5ee0c52ff069de56761`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*`
- **netgear · d7800_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-36d5efe81ee1ba742919808cfa883f9ee0f0d2319c34dfdc9f0e22f6e7e366ac`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:d7800_firmware:-:*:*:*:*:*:*:*`
- **netgear · jnr1010v2** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-df1315d322a32a246f41dbcb7209cd38f080d91d483b0b6347b285c7961928b3`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:jnr1010v2:-:*:*:*:*:*:*:*`
- **netgear · jnr1010v2_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-631a52e95d2798441c2b37fd19de582fdfef2eea3e93e22019e2f7f78105d953`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:jnr1010v2_firmware:-:*:*:*:*:*:*:*`
- **netgear · jnr3300** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-1b635486281053a92f6500eb2647cdd89deb4bfef5e4f9c551d908935909bc61`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:jnr3300:-:*:*:*:*:*:*:*`
- **netgear · jnr3300_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-d61e4a45c216ef7c59cd7cfc86492a18fa67c24e3eae217715fae5bff77cb388`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:jnr3300_firmware:-:*:*:*:*:*:*:*`
- **netgear · jwnr2010v5** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-c02e12be2f063be046cde59791b8e144de48446b800fe58341834498713a962b`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:jwnr2010v5:-:*:*:*:*:*:*:*`
- **netgear · jwnr2010v5_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-b1001cccd41cbdb893c457855c5e813dafa21277d7b86455a1d5a1a0c159a20c`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:jwnr2010v5_firmware:-:*:*:*:*:*:*:*`
- **netgear · r2000** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-d02666022ec26b89e3c73c78be9dd428a493e95d9b38910cc6f409d81cf65b4a`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:r2000:-:*:*:*:*:*:*:*`
- **netgear · r2000_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-25620fc3bd791bf9bee4582615a3cb08eef08a2ad5fea38381a34339aa19b740`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:r2000_firmware:-:*:*:*:*:*:*:*`
- **netgear · r6100** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-112207fd19763bc7661233c6a49b8196dd398284784a4c3a84813b177ff67a57`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:r6100:-:*:*:*:*:*:*:*`
- **netgear · r6100_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-73e259909c7501d30f65f436e3207f9db86131312c0a7f1ae90f8ed8b120083f`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:r6100_firmware:-:*:*:*:*:*:*:*`
- **netgear · r6220** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-1c5c55e51f7871ce5d16eb274511cf67e602421f32dfc79da901fb000d10ca15`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:r6220:-:*:*:*:*:*:*:*`
- **netgear · r6220_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-0fb158c1e51c9efab5ec742cd25cbfd78a659a7fb82a02f6665489c9bcb28451`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:r6220_firmware:-:*:*:*:*:*:*:*`
- **netgear · r7500** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-a69dc7fa877966fe6cb6273d89af3d659cfcde08153df287c6da7f807ca4621b`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:r7500:-:*:*:*:*:*:*:*`
- **netgear · r7500_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-9333bad6a859159321240bf6078c59c7d7a1db0a6dc74c70c4e7505325ca9ac0`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:r7500_firmware:-:*:*:*:*:*:*:*`
- **netgear · r7500v2** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-34972aaedfdce79b62d2a7ff06ebe2b7e81817567502ba71f105c06457734b1f`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:r7500v2:-:*:*:*:*:*:*:*`
- **netgear · r7500v2_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-b066334fd650ef5313eba78a9d138509d9e39e5344f6ef9f76ca97ab0586ed5b`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:r7500v2_firmware:-:*:*:*:*:*:*:*`
- **netgear · wndr3700v4** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-8bcce761a265e9faa4e75794351ba77f9d2ce99f7e175851d7d89c2e89a5efe0`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:wndr3700v4:-:*:*:*:*:*:*:*`
- **netgear · wndr3700v4_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-29f00696e769910eafc671f7d4f2aea167058b0dd4e7e4d3c3ceed4ebd0da35b`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:wndr3700v4_firmware:-:*:*:*:*:*:*:*`
- **netgear · wndr3800** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-44649db429e5be520cacb8ea1274930958d7429290a3a71e4ae49c45947a1a91`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:wndr3800:-:*:*:*:*:*:*:*`
- **netgear · wndr3800_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-18097c14a4cf2d28fe2448824c7b81022b930a7d9bc0c43f97a7e6cc440ea30e`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:wndr3800_firmware:-:*:*:*:*:*:*:*`
- **netgear · wndr4300** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-bca300bfff7f1dd5d94f98973979d287abe6360b64469699a83c52056d71eac8`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:wndr4300:-:*:*:*:*:*:*:*`
- **netgear · wndr4300_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-82a818d1c679b1134d7a39096a6977070d6b8eb20359f90dd53762f82a542736`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:wndr4300_firmware:-:*:*:*:*:*:*:*`
- **netgear · wndr4300v2** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-fe1d572dbcfbe5f3ebb0cc49afa9dbc4d2940181dc22085af51b59ea6f05df6a`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:wndr4300v2:-:*:*:*:*:*:*:*`
- **netgear · wndr4300v2_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-be65846c508285ea283cbd85c3ff0c4c875ee61e0c209c5dd338b055b10b23fb`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:wndr4300v2_firmware:-:*:*:*:*:*:*:*`
- **netgear · wndr4500v3** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-f7e16b09ad28730f71aa5168089a6bda8142554fb38165d2c76ece5b651ca259`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:wndr4500v3:-:*:*:*:*:*:*:*`
- **netgear · wndr4500v3_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-44e0b3decee80d7aa1ce79bdf96037abcd07c418ea466d2988a512735dcf3708`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:wndr4500v3_firmware:-:*:*:*:*:*:*:*`
- **netgear · wndr4700** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-6bcd0451ad220ed54329b90a4140c4687905b088421c3eb0e8f58c1c68047cea`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:wndr4700:-:*:*:*:*:*:*:*`
- **netgear · wndr4700_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-0330ea04b2bd959040f8dea3a31c9bff0255bc05bfcba70cfcde1451bfd4dfbf`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:wndr4700_firmware:-:*:*:*:*:*:*:*`
- **netgear · wnr1000v2** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-3e6741d00ec7ab8014d51d2af73df941df45148ca8ab169c412b63f8b4fc1e4c`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:wnr1000v2:-:*:*:*:*:*:*:*`
- **netgear · wnr1000v2_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-6a2f21b13f81667a966c0c31451ed53e3260867d5de6d47157ae1f4c26a395ed`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:wnr1000v2_firmware:-:*:*:*:*:*:*:*`
- **netgear · wnr1000v4** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-7abf45a58d200a618cd391e7d4950f2038f0ca44b2a6287f19036b5c156f592f`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:wnr1000v4:-:*:*:*:*:*:*:*`
- **netgear · wnr1000v4_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-9d0bac0f3d7d09b25a584d43f09cf3904524882f89f2b2fbae3d062e96dd7d6e`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:wnr1000v4_firmware:-:*:*:*:*:*:*:*`
- **netgear · wnr2000v3** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-600cb54f01c54f482415e5201a6f6fb38282b1d58adf25483d3595bc6da798a4`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:wnr2000v3:-:*:*:*:*:*:*:*`
- **netgear · wnr2000v3_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-91e905e5961c6fc39f4b84e7e0302bdd976786bd05bbe08f9de085cca64582c9`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:wnr2000v3_firmware:-:*:*:*:*:*:*:*`
- **netgear · wnr2000v4** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-d70fdd247b23e08e4b04549fae476086bf8391bccc82c70970fad36a09adfc37`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:wnr2000v4:-:*:*:*:*:*:*:*`
- **netgear · wnr2000v4_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-03da4e2b12424318f891c69774a71f17c99c3193e2e2eb3975bdec44d6bcaeb3`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:wnr2000v4_firmware:-:*:*:*:*:*:*:*`
- **netgear · wnr2000v5** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-dc11d51397461bf8a370fe62ec52b07e1c46167c7337fb0a5c6d6ab248e2c39e`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:wnr2000v5:-:*:*:*:*:*:*:*`
- **netgear · wnr2000v5_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-f38993c6aa1172ab8c7798da135a7389435fb39c8e9cbfde65555b9b8f74f416`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:wnr2000v5_firmware:-:*:*:*:*:*:*:*`
- **netgear · wnr2020** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-9b7e1e6c4d95b364f097992e03d327e8e06e22f2d8633e6c0f77a152fa3f3d75`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:wnr2020:-:*:*:*:*:*:*:*`
- **netgear · wnr2020_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-c915cc60422bd274386ec1119b4a3a266ebacf5a20e7cfd79deadb8d57bf06ab`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:wnr2020_firmware:-:*:*:*:*:*:*:*`
- **netgear · wnr2050** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-23b29f7c2a40345f6bbc80e2af47566c9b01ef1da73ccec1e8c9d45bca353ed7`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:wnr2050:-:*:*:*:*:*:*:*`
- **netgear · wnr2050_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-2c9ec044aa99ba5ccd2913989cad8ba84fe1e8d0a153a03a6eec50e1c933ea53`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:wnr2050_firmware:-:*:*:*:*:*:*:*`
- **netgear · wnr2200** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-6bd9643827c0f45a28dbde6c5d463e6b43aba11cb165bb2790b673eb93aed5e1`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:wnr2200:-:*:*:*:*:*:*:*`
- **netgear · wnr2200_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-8c729043dff9fc28b15d848447e0e3f3367f43aebfb9eca08e42a2e048afc7fc`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:wnr2200_firmware:-:*:*:*:*:*:*:*`
- **netgear · wnr2500** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-c05643e7ce60965dad6304df5682d4753ffbec8251f42623c621ab57376f9e5b`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:wnr2500:-:*:*:*:*:*:*:*`
- **netgear · wnr2500_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-8200227f4778f16bb3392edb81f148184a9678e90fb20e0f168ef81b15340b10`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:wnr2500_firmware:-:*:*:*:*:*:*:*`
- **netgear · wnr614** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-f0802e8d658661ff5b33f9e8c51f24820c10d03de8947aab86e984061c06400d`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:wnr614:-:*:*:*:*:*:*:*`
- **netgear · wnr614_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-3decbdf813b1132b85fa43230c19eb6db7db870cd67a20d668d8f04fff24cb2a`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:wnr614_firmware:-:*:*:*:*:*:*:*`
- **netgear · wnr618** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-545a42926fbf4745d319a83abf0fe9dbfef6821f55ac35c8395aa522624aa721`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:netgear:wnr618:-:*:*:*:*:*:*:*`
- **netgear · wnr618_firmware** (vulnerable_target; supported)
  - Versions: Version not applicable
  - Canonical identity: `product-454316c1f8bec794d82b27d61664ddabe6763957553d58110ea0c604c39a2f21`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:netgear:wnr618_firmware:-:*:*:*:*:*:*:*`

## Identity source boundaries

- **cpe_dictionary**: 1775266 records through 2026-07-21T06:45:29.809553+00:00
  - Run: `27d65b0f-b718-4b4f-bb79-c47c68d09dfa`
- **cpe_match**: 643502 records through 2026-07-21T08:13:17.697275+00:00
  - Run: `955dae73-7302-438b-aee1-058d7cc5d48e`

## Limitations and unknowns

- KEV membership is authoritative for the catalog, not proof of exposure in any environment.
- EPSS is a dated model probability and not an individual-environment prediction.
- Affected or fixed status applies only to the exact cited product and version scope; unresolved scope remains unknown.
- NVD-carried upstream facts remain derivative and are not independent corroboration.
- Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
- NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
- Factor D remains unknown because WC-03 has not converted canonical CPE mappings into generation-bound mapping obligations; canonical identity alone does not score applicability.
- Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.

Generated from CASCA normalized evidence. This receipt is not proof that an asset is affected, unaffected, safe, or fixed.