PT-2020-8297 · NetGear · Netgear R7800+7

Published

2020-04-23

·

Updated

2020-04-28

·

CVE-2017-18748

CVSS v3.1

8.8

High

VectorAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: NETGEAR EX6200v2 versions prior to 1.0.1.44 NETGEAR R6100 versions prior to 1.0.1.12 NETGEAR R7500 versions prior to 1.0.0.108 NETGEAR R7500v2 versions prior to 1.0.3.10 NETGEAR R7800 versions prior to 1.0.2.28 NETGEAR R9000 versions prior to 1.0.2.30 NETGEAR WNDR4300v2 versions prior to 1.0.0.48 NETGEAR WNDR4500v3 versions prior to 1.0.0.48
Description: The issue is related to the incorrect configuration of security settings in certain NETGEAR devices. This configuration issue may lead to security risks.
Recommendations: For NETGEAR EX6200v2 versions prior to 1.0.1.44, update to version 1.0.1.44 or later. For NETGEAR R6100 versions prior to 1.0.1.12, update to version 1.0.1.12 or later. For NETGEAR R7500 versions prior to 1.0.0.108, update to version 1.0.0.108 or later. For NETGEAR R7500v2 versions prior to 1.0.3.10, update to version 1.0.3.10 or later. For NETGEAR R7800 versions prior to 1.0.2.28, update to version 1.0.2.28 or later. For NETGEAR R9000 versions prior to 1.0.2.30, update to version 1.0.2.30 or later. For NETGEAR WNDR4300v2 versions prior to 1.0.0.48, update to version 1.0.0.48 or later. For NETGEAR WNDR4500v3 versions prior to 1.0.0.48, update to version 1.0.0.48 or later.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2017-18748

Affected Products

Netgear Ex6200V2
Netgear R6100
Netgear R7500
Netgear R7500V2
Netgear R7800
Netgear R9000
Netgear Wndr4300V2
Netgear Wndr4500V3