PT-2020-8260 · NetGear · R7000P+12

Published

2020-04-24

·

Updated

2020-05-05

·

CVE-2017-18711

CVSS v3.1

8.8

High

VectorAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: NETGEAR D7800 versions prior to 1.0.1.28 NETGEAR R6400 versions prior to 1.01.32 NETGEAR R6400v2 versions prior to 1.0.2.44 NETGEAR R6700 versions prior to 1.0.1.36 NETGEAR R6900 versions prior to 1.0.1.34 NETGEAR R6900P versions prior to 1.3.0.8 NETGEAR R7000 versions prior to 1.0.9.14 NETGEAR R7000P versions prior to 1.3.0.8 NETGEAR R7500v2 versions prior to 1.0.3.20 NETGEAR R7800 versions prior to 1.0.2.40 NETGEAR R9000 versions prior to 1.0.2.52 NETGEAR WNDR4300v2 versions prior to 1.0.0.48 NETGEAR WNDR4500v3 versions prior to 1.0.0.48
Description: The issue is related to the incorrect configuration of security settings in certain NETGEAR devices.
Recommendations: For D7800, update to version 1.0.1.28 or later. For R6400, update to version 1.01.32 or later. For R6400v2, update to version 1.0.2.44 or later. For R6700, update to version 1.0.1.36 or later. For R6900, update to version 1.0.1.34 or later. For R6900P, update to version 1.3.0.8 or later. For R7000, update to version 1.0.9.14 or later. For R7000P, update to version 1.3.0.8 or later. For R7500v2, update to version 1.0.3.20 or later. For R7800, update to version 1.0.2.40 or later. For R9000, update to version 1.0.2.52 or later. For WNDR4300v2, update to version 1.0.0.48 or later. For WNDR4500v3, update to version 1.0.0.48 or later.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2017-18711

Affected Products

D7800
R6400
R6400V2
R6700
R6900
R6900P
R7000
R7000P
R7500V2
R7800
R9000
Wndr4300V2
Wndr4500V3