PT-2020-8314 · NetGear · Netgear Wnr2000V2+6

Maxime Peterlin · Published 2020-04-22 · Updated 2020-04-27 · CVE-2017-18765

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: NETGEAR R6300v2 versions prior to 1.0.4.8 NETGEAR R6400 versions prior to 1.0.1.22 NETGEAR R6400v2 versions prior to 1.0.2.32 NETGEAR R6700 versions prior to 1.0.1.20 NETGEAR R6900 versions prior to 1.0.1.20 NETGEAR WNR3500Lv2 versions prior to 1.2.0.44 NETGEAR WNR2000v2 versions prior to 1.2.0.8

Description: Certain NETGEAR devices are affected by a denial of service issue.

Recommendations: For R6300v2, update to version 1.0.4.8 or later. For R6400, update to version 1.0.1.22 or later. For R6400v2, update to version 1.0.2.32 or later. For R6700, update to version 1.0.1.20 or later. For R6900, update to version 1.0.1.20 or later. For WNR3500Lv2, update to version 1.2.0.44 or later. For WNR2000v2, update to version 1.2.0.8 or later.

Fix

Related Identifiers

CVE-2017-18765

Affected Products

Netgear R6300V2

Netgear R6400

Netgear R6400V2

Netgear R6700

Netgear R6900P

Netgear Wnr2000V2

Netgear Wnr3500Lv2

References · 5

• https://kb.netgear.com/000051480/Security-Advisory-for-Denial-of-Service-on-Some-Routers-PSV-2017-0648 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-18765 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-18765 · Security Note
• https://t.me/cvenotify/3034 · Telegram Post
• https://t.me/cibsecurity/11534 · Telegram Post