PT-2020-8305 · NetGear · R6700+18

Houdini + 1 · Published 2020-04-22 · Updated 2020-04-27 · CVE-2017-18756

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: D6220 versions prior to 1.0.0.32 D6400 versions prior to 1.0.0.66 D8500 versions prior to 1.0.3.35 DGN2200Bv4 versions prior to 1.0.0.94 DGN2200v4 versions prior to 1.0.0.94 R6250 versions prior to 1.0.4.14 R6300v2 versions prior to 1.0.4.18 R6400 versions prior to 1.01.32 R6400v2 versions prior to 1.0.2.44 R6700 versions prior to 1.0.1.36 R6900 versions prior to 1.0.1.30 R6900P versions prior to 1.3.0.8 R7000 versions prior to 1.0.9.14 R7000P versions prior to 1.3.0.8 R7100LG versions prior to 1.0.0.34 R7900 versions prior to 1.0.2.4 R8000 versions prior to 1.0.4.2 WN2500RPv2 versions prior to 1.0.1.50 WNDR3400v3 versions prior to 1.0.1.14 WNDR4000 versions prior to 1.0.2.10

Description: The issue is related to the incorrect configuration of security settings in certain NETGEAR devices.

Recommendations: For D6220 versions prior to 1.0.0.32, update to version 1.0.0.32 or later. For D6400 versions prior to 1.0.0.66, update to version 1.0.0.66 or later. For D8500 versions prior to 1.0.3.35, update to version 1.0.3.35 or later. For DGN2200Bv4 versions prior to 1.0.0.94, update to version 1.0.0.94 or later. For DGN2200v4 versions prior to 1.0.0.94, update to version 1.0.0.94 or later. For R6250 versions prior to 1.0.4.14, update to version 1.0.4.14 or later. For R6300v2 versions prior to 1.0.4.18, update to version 1.0.4.18 or later. For R6400 versions prior to 1.01.32, update to version 1.01.32 or later. For R6400v2 versions prior to 1.0.2.44, update to version 1.0.2.44 or later. For R6700 versions prior to 1.0.1.36, update to version 1.0.1.36 or later. For R6900 versions prior to 1.0.1.30, update to version 1.0.1.30 or later. For R6900P versions prior to 1.3.0.8, update to version 1.3.0.8 or later. For R7000 versions prior to 1.0.9.14, update to version 1.0.9.14 or later. For R7000P versions prior to 1.3.0.8, update to version 1.3.0.8 or later. For R7100LG versions prior to 1.0.0.34, update to version 1.0.0.34 or later. For R7900 versions prior to 1.0.2.4, update to version 1.0.2.4 or later. For R8000 versions prior to 1.0.4.2, update to version 1.0.4.2 or later. For WN2500RPv2 versions prior to 1.0.1.50, update to version 1.0.1.50 or later. For WNDR3400v3 versions prior to 1.0.1.14, update to version 1.0.1.14 or later. For WNDR4000 versions prior to 1.0.2.10, update to version 1.0.2.10 or later.

Fix

Related Identifiers

CVE-2017-18756

Affected Products

D6220

D6400

D8500

Dgn2200V4

R6250

R6300V2

R6400

R6400V2

R6700

R6900

R6900P

R7000

R7000P

R7100Lg

R7900

R8000

Wn2500Rpv2

Wndr3400V3

Wndr4000

References · 4

• https://osv.dev/vulnerability/CVE-2017-18756 · Vendor Advisory
• https://kb.netgear.com/000051492/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-Gateways-and-Extenders-PSV-2017-2756 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-18756 · Security Note
• https://t.me/cibsecurity/11542 · Telegram Post