PT-2020-8281 · NetGear · Netgear R6300V2+2

Published 2020-04-23 · Updated 2020-04-23 · CVE-2017-18732

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: NETGEAR R6300v2 versions prior to 1.0.4.8 NETGEAR PLW1000v2 versions prior to 1.0.0.14 NETGEAR PLW1010v2 versions prior to 1.0.0.14

Description: The issue is related to authentication bypass, affecting certain NETGEAR devices.

Recommendations: For R6300v2 versions prior to 1.0.4.8, update to version 1.0.4.8 or later. For PLW1000v2 versions prior to 1.0.0.14, update to version 1.0.0.14 or later. For PLW1010v2 versions prior to 1.0.0.14, update to version 1.0.0.14 or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2017-18732

Affected Products

Netgear Plw1000V2

Netgear Plw1010V2

Netgear R6300V2

References · 5

• https://kb.netgear.com/000051523/Security-Advisory-for-Authentication-Bypass-on-R6300v2-PLW1000v2-and-PLW1010v2-PSV-2016-0069 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-18732 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-18732 · Security Note
• https://t.me/cibsecurity/11594 · Telegram Post
• https://t.me/cvenotify/3118 · Telegram Post