CVE-2017-18775

Certain NETGEAR devices are affected by CSRF. This affects R6100 before 1.0.1.12, R7500 before 1.0.0.108, WNDR3700v4 before 1.0.2.86, WNDR4300v1 before 1.0.2.88, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR2000v5 before 1.0.0.42.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2020-04-22

Last modified

2024-08-05

Weaknesses

CWE-352

Affected products

• R6100 Firmware (Netgear)
• R7500 Firmware (Netgear)
• Wndr3700 Firmware (Netgear)
• Wndr4300 Firmware (Netgear)
• Wndr4500 Firmware (Netgear)
• Wnr2000 Firmware (Netgear)

References

• https://kb.netgear.com/000049553/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Routers-and-Gateways-PSV-2017…