PT-2020-8318 · NetGear · R6700+40

Darkarnium · Published 2020-04-22 · Updated 2020-04-23 · CVE-2017-18769

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: D6220 versions 1.0.0.0 through 1.0.0.39 D6400 versions 1.0.0.0 through 1.0.0.73 D7000 versions 1.0.0.0 through 1.0.1.59 D7800 versions 1.0.0.0 through 1.0.1.33 D8500 versions 1.0.0.0 through 1.0.3.38 DGN2200v4 versions 1.0.0.0 through 1.0.0.93 DGN2200Bv4 versions 1.0.0.0 through 1.0.0.93 EX6200v2 versions 1.0.0.0 through 1.0.1.49 EX7000 versions 1.0.0.0 through 1.0.0.55 JR6150 versions 1.0.0.0 through 1.0.1.17 R6050 versions 1.0.0.0 through 1.0.1.9J R6100 versions 1.0.0.0 through 1.0.1.15 R6150 versions 1.0.0.0 through 1.0.1.9 R6220 versions 1.0.0.0 through 1.1.0.49 R6250 versions 1.0.0.0 through 1.0.4.11 R6300v2 versions 1.0.0.0 through 1.0.4.11 R6400 versions 1.0.0.0 through 1.0.1.23 R6400v2 versions 1.0.0.0 through 1.0.2.31 R6700 versions 1.0.0.0 through 1.0.1.25 R6700v2 versions 1.0.0.0 through 1.2.0.3 R6800 versions 1.0.0.0 through 1.0.1.9 R6900 versions 1.0.0.0 through 1.0.1.25 R6900P versions 1.0.0.0 through 1.0.0.57 R6900v2 versions 1.0.0.0 through 1.2.0.3 R7000 versions 1.0.0.0 through 1.0.9.5 R7000P versions 1.0.0.0 through 1.0.0.57 R7100LG versions 1.0.0.0 through 1.0.0.31 R7300 versions 1.0.0.0 through 1.0.0.53 R7500 versions 1.0.0.0 through 1.0.0.111 R7500v2 versions 1.0.0.0 through 1.0.3.19 R7800 versions 1.0.0.0 through 1.0.2.35 R7900 versions 1.0.0.0 through 1.0.1.17 R8000 versions 1.0.0.0 through 1.0.3.47 R8300 versions 1.0.0.0 through 1.0.2.103 R8500 versions 1.0.0.0 through 1.0.2.103 R9000 versions 1.0.0.0 through 1.0.2.39 WNDR3400v3 versions 1.0.0.0 through 1.0.1.13 WNDR3700v4 versions 1.0.0.0 through 1.0.2.95 WNDR4300v1 versions 1.0.0.0 through 1.0.2.97 WNDR4300v2 versions 1.0.0.0 through 1.0.0.47 WNDR4500v3 versions 1.0.0.0 through 1.0.0.47 WNR3500Lv2 versions 1.0.0.0 through 1.2.0.43

Description: Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files.

Recommendations: Update D6220 to version 1.0.0.40 or later. Update D6400 to version 1.0.0.74 or later. Update D7000 to version 1.0.1.60 or later. Update D7800 to version 1.0.1.34 or later. Update D8500 to version 1.0.3.39 or later. Update DGN2200v4 to version 1.0.0.94 or later. Update DGN2200Bv4 to version 1.0.0.94 or later. Update EX6200v2 to version 1.0.1.50 or later. Update EX7000 to version 1.0.0.56 or later. Update JR6150 to version 1.0.1.18 or later. Update R6050 to version 1.0.1.10J or later. Update R6100 to version 1.0.1.16 or later. Update R6150 to version 1.0.1.10 or later. Update R6220 to version 1.1.0.50 or later. Update R6250 to version 1.0.4.12 or later. Update R6300v2 to version 1.0.4.12 or later. Update R6400 to version 1.0.1.24 or later. Update R6400v2 to version 1.0.2.32 or later. Update R6700 to version 1.0.1.26 or later. Update R6700v2 to version 1.2.0.4 or later. Update R6800 to version 1.0.1.10 or later. Update R6900 to version 1.0.1.26 or later. Update R6900P to version 1.0.0.58 or later. Update R6900v2 to version 1.2.0.4 or later. Update R7000 to version 1.0.9.6 or later. Update R7000P to version 1.0.0.58 or later. Update R7100LG to version 1.0.0.32 or later. Update R7300 to version 1.0.0.54 or later. Update R7500 to version 1.0.0.112 or later. Update R7500v2 to version 1.0.3.20 or later. Update R7800 to version 1.0.2.36 or later. Update R7900 to version 1.0.1.18 or later. Update R8000 to version 1.0.3.48 or later. Update R8300 to version 1.0.2.104 or later. Update R8500 to version 1.0.2.104 or later. Update R9000 to version 1.0.2.40 or later. Update WNDR3400v3 to version 1.0.1.14 or later. Update WNDR3700v4 to version 1.0.2.96 or later. Update WNDR4300v1 to version 1.0.2.98 or later. Update WNDR4300v2 to version 1.0.0.48 or later. Update WNDR4500v3 to version 1.0.0.48 or later. Update WNR3500Lv2 to version 1.2.0.44 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-18769

Affected Products

D6220

D6400

D7000

D7800

D8500

Dgn2200V4

Ex6200V2

Ex7000

Jr6150

R6050

R6100

R6150

R6220

R6250

R6300V2

R6400

R6400V2

R6700

R6700V2

R6800

R6900

R6900P

R6900V2

R7000

R7000P

R7100Lg

R7300

R7500

R7500V2

R7800

R7900

R8000

R8300

R8500

R9000

Wndr3400V3

Wndr3700V4

Wndr4300V1

Wndr4300V2

Wndr4500V3

Wnr3500Lv2

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-18769 · Security Note
• https://kb.netgear.com/000051474/Security-Advisory-for-Arbitrary-File-Read-on-Some-Routers-Gateways-and-Extenders-PSV-2016-0122 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-18769 · Vendor Advisory
• https://t.me/cibsecurity/11526 · Telegram Post