PT-2020-8306

CVE-2017-18757

·

Published

2020-04-22

·

Updated

2020-04-27

Description by

CVSS 3.1
5.4
Medium
MetricsAV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions: NETGEAR D7800 versions prior to 1.0.1.30 NETGEAR R6100 versions prior to 1.0.1.16 NETGEAR R7500 versions prior to 1.0.0.116 NETGEAR R7500v2 versions prior to 1.0.3.20 NETGEAR R7800 versions prior to 1.0.2.36 NETGEAR R9000 versions prior to 1.0.2.40 NETGEAR WNDR4300v2 versions prior to 1.0.0.48 NETGEAR WNDR4300v1 versions prior to 1.0.2.90 NETGEAR WNDR4500v3 versions prior to 1.0.0.48
Description: The issue is related to the incorrect configuration of security settings in certain NETGEAR devices.
Recommendations: For NETGEAR D7800 version prior to 1.0.1.30, update to version 1.0.1.30 or later. For NETGEAR R6100 version prior to 1.0.1.16, update to version 1.0.1.16 or later. For NETGEAR R7500 version prior to 1.0.0.116, update to version 1.0.0.116 or later. For NETGEAR R7500v2 version prior to 1.0.3.20, update to version 1.0.3.20 or later. For NETGEAR R7800 version prior to 1.0.2.36, update to version 1.0.2.36 or later. For NETGEAR R9000 version prior to 1.0.2.40, update to version 1.0.2.40 or later. For NETGEAR WNDR4300v2 version prior to 1.0.0.48, update to version 1.0.0.48 or later. For NETGEAR WNDR4300v1 version prior to 1.0.2.90, update to version 1.0.2.90 or later. For NETGEAR WNDR4500v3 version prior to 1.0.0.48, update to version 1.0.0.48 or later.
Exploitability
Fix
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾