PT-2020-8306 · NetGear · Netgear Wndr4300V1+7

Published

2020-04-22

·

Updated

2020-04-27

·

CVE-2017-18757

CVSS v3.1

5.4

Medium

VectorAV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions: NETGEAR D7800 versions prior to 1.0.1.30 NETGEAR R6100 versions prior to 1.0.1.16 NETGEAR R7500 versions prior to 1.0.0.116 NETGEAR R7500v2 versions prior to 1.0.3.20 NETGEAR R7800 versions prior to 1.0.2.36 NETGEAR R9000 versions prior to 1.0.2.40 NETGEAR WNDR4300v2 versions prior to 1.0.0.48 NETGEAR WNDR4300v1 versions prior to 1.0.2.90 NETGEAR WNDR4500v3 versions prior to 1.0.0.48
Description: The issue is related to the incorrect configuration of security settings in certain NETGEAR devices.
Recommendations: For NETGEAR D7800 version prior to 1.0.1.30, update to version 1.0.1.30 or later. For NETGEAR R6100 version prior to 1.0.1.16, update to version 1.0.1.16 or later. For NETGEAR R7500 version prior to 1.0.0.116, update to version 1.0.0.116 or later. For NETGEAR R7500v2 version prior to 1.0.3.20, update to version 1.0.3.20 or later. For NETGEAR R7800 version prior to 1.0.2.36, update to version 1.0.2.36 or later. For NETGEAR R9000 version prior to 1.0.2.40, update to version 1.0.2.40 or later. For NETGEAR WNDR4300v2 version prior to 1.0.0.48, update to version 1.0.0.48 or later. For NETGEAR WNDR4300v1 version prior to 1.0.2.90, update to version 1.0.2.90 or later. For NETGEAR WNDR4500v3 version prior to 1.0.0.48, update to version 1.0.0.48 or later.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2017-18757

Affected Products

Netgear R7800
Netgear R6100
Netgear R7500
Netgear R7500V2
Netgear R9000
Netgear Wndr4300V1
Netgear Wndr4300V2
Netgear Wndr4500V3