CVE-2017-18853
Certain NETGEAR devices are affected by password recovery and file access. This affects D8500 1.0.3.27 and earlier, DGN2200v4 1.0.0.82 and earlier, R6300v2 1.0.4.06 and earlier, R6400 1.0.1.20 and earlier, R6400v2 1.0.2.18 and earlier, R6700 1.0.1.22 and earlier, R6900 1.0.1.20 and earlier, R7000 1.0.7.10 and earlier, R7000P 1.0.0.58 and earlier, R7100LG 1.0.0.28 and earlier, R7300DST 1.0.0.52 and earlier, R7900 1.0.1.12 and earlier, R8000 1.0.3.46 and earlier, R8300 1.0.2.86 and earlier, R8500 1.0.2.86 and earlier, WNDR3400v3 1.0.1.8 and earlier, and WNDR4500v2 1.0.0.62 and earlier.
- Score
- CVSS 3.0 9.6 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2020-04-29
- Last modified
- 2024-08-05
- Weaknesses
- CWE-200
Affected products
- D8500 Firmware (Netgear)
- Dgn2200 Firmware (Netgear)
- R6300 Firmware (Netgear)
- R6400 Firmware (Netgear)
- R6700 Firmware (Netgear)
- R6900 Firmware (Netgear)
- R7000 Firmware (Netgear)
- R7000p Firmware (Netgear)
- R7100lg Firmware (Netgear)
- R7300dst Firmware (Netgear)
- R7900 Firmware (Netgear)
- R8000 Firmware (Netgear)
- R8300 Firmware (Netgear)
- R8500 Firmware (Netgear)
- Wndr3400 Firmware (Netgear)
- Wndr4500 Firmware (Netgear)
References
- https://kb.netgear.com/000045848/Security-Advisory-for-Password-Recovery-and-File-Access-on-Some-Routers-and-Modem-Rout…