PT-2020-8282 · NetGear · Netgear R8500+7
Published
2020-04-23
·
Updated
2020-04-23
·
CVE-2017-18733
CVSS v3.1
8.8
High
| Vector | AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
NETGEAR D6220 versions prior to 1.0.0.28
NETGEAR D6400 versions prior to 1.0.0.60
NETGEAR D8500 versions prior to 1.0.3.29
NETGEAR R6250 versions prior to 1.0.4.8
NETGEAR R6400 versions prior to 1.0.1.22
NETGEAR R6400v2 versions prior to 1.0.2.32
NETGEAR R7100LG versions prior to 1.0.0.32
NETGEAR R7300DST versions prior to 1.0.0.52
NETGEAR R8300 versions prior to 1.0.2.94
NETGEAR R8500 versions prior to 1.0.2.100
Description:
The issue is related to authentication bypass, affecting certain NETGEAR devices.
Recommendations:
For NETGEAR D6220 version prior to 1.0.0.28, update to version 1.0.0.28 or later.
For NETGEAR D6400 version prior to 1.0.0.60, update to version 1.0.0.60 or later.
For NETGEAR D8500 version prior to 1.0.3.29, update to version 1.0.3.29 or later.
For NETGEAR R6250 version prior to 1.0.4.8, update to version 1.0.4.8 or later.
For NETGEAR R6400 version prior to 1.0.1.22, update to version 1.0.1.22 or later.
For NETGEAR R6400v2 version prior to 1.0.2.32, update to version 1.0.2.32 or later.
For NETGEAR R7100LG version prior to 1.0.0.32, update to version 1.0.0.32 or later.
For NETGEAR R7300DST version prior to 1.0.0.52, update to version 1.0.0.52 or later.
For NETGEAR R8300 version prior to 1.0.2.94, update to version 1.0.2.94 or later.
For NETGEAR R8500 version prior to 1.0.2.100, update to version 1.0.2.100 or later.
Fix
Improper Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Netgear R6220
Netgear R6400
Netgear R8500
Netgear R6250
Netgear R6400V2
Netgear R7100Lg
Netgear R7300Dst
Netgear R8300