PT-2020-8327 · NetGear · R6400+34
Published
2020-04-22
·
Updated
2020-04-24
·
CVE-2017-18778
CVSS v3.1
8.4
High
| Vector | AC:L/AV:L/A:H/C:H/I:H/PR:N/S:U/UI:N |
Name of the Vulnerable Software and Affected Versions:
D6220 versions 1.0.0.0 through 1.0.0.27
D6400 versions 1.0.0.0 through 1.0.0.59
D7000 versions 1.0.0.0 through 1.0.1.51
D7000v2 versions 1.0.0.0 through 1.0.0.37
D7800 versions 1.0.0.0 through 1.0.1.23
D8500 versions 1.0.0.0 through 1.0.3.28
JNR1010v2 versions 1.0.0.0 through 1.1.0.43
JR6150 versions 1.0.0.0 through 1.0.1.13
JWNR2010v5 versions 1.0.0.0 through 1.1.0.43
PR2000 versions 1.0.0.0 through 1.0.0.19
R6050 versions 1.0.0.0 through 1.0.1.13
R6220 versions 1.0.0.0 through 1.1.0.59
R6400 versions 1.0.0.0 through 1.1.0.25
R6400v2 versions 1.0.0.0 through 1.0.2.45
R6700v2 versions 1.0.0.0 through 1.2.0.1
R6800 versions 1.0.0.0 through 1.2.0.1
R6900v2 versions 1.0.0.0 through 1.2.0.1
R7100LG versions 1.0.0.0 through 1.0.0.31
R7300DST versions 1.0.0.0 through 1.0.0.55
R7500 versions 1.0.0.0 through 1.0.0.111
R7500v2 versions 1.0.0.0 through 1.0.3.23
R7800 versions 1.0.0.0 through 1.0.2.35
R7900P versions 1.0.0.0 through 1.1.4.5
R8000P versions 1.0.0.0 through 1.1.4.5
R8300 versions 1.0.0.0 through 1.0.2.103
R8500 versions 1.0.0.0 through 1.0.2.103
R9000 versions 1.0.0.0 through 1.0.2.51
WNDR3700v4 versions 1.0.0.0 through 1.0.2.93
WNDR3700v5 versions 1.0.0.0 through 1.1.0.49
WNDR4300v1 versions 1.0.0.0 through 1.0.2.95
WNDR4300v2 versions 1.0.0.0 through 1.0.0.51
WNDR4500v3 versions 1.0.0.0 through 1.0.0.51
WNR1000v4 versions 1.0.0.0 through 1.1.0.43
WNR2020 versions 1.0.0.0 through 1.1.0.43
WNR2050 versions 1.0.0.0 through 1.1.0.43
Description:
Certain NETGEAR devices are affected by incorrect configuration of security settings.
Recommendations:
Update D6220 to version 1.0.0.28 or later.
Update D6400 to version 1.0.0.60 or later.
Update D7000 to version 1.0.1.52 or later.
Update D7000v2 to version 1.0.0.38 or later.
Update D7800 to version 1.0.1.24 or later.
Update D8500 to version 1.0.3.29 or later.
Update JNR1010v2 to version 1.1.0.44 or later.
Update JR6150 to version 1.0.1.14 or later.
Update JWNR2010v5 to version 1.1.0.44 or later.
Update PR2000 to version 1.0.0.20 or later.
Update R6050 to version 1.0.1.14 or later.
Update R6220 to version 1.1.0.60 or later.
Update R6400 to version 1.1.0.26 or later.
Update R6400v2 to version 1.0.2.46 or later.
Update R6700v2 to version 1.2.0.2 or later.
Update R6800 to version 1.2.0.2 or later.
Update R6900v2 to version 1.2.0.2 or later.
Update R7100LG to version 1.0.0.32 or later.
Update R7300DST to version 1.0.0.56 or later.
Update R7500 to version 1.0.0.112 or later.
Update R7500v2 to version 1.0.3.24 or later.
Update R7800 to version 1.0.2.36 or later.
Update R7900P to version 1.1.4.6 or later.
Update R8000P to version 1.1.4.6 or later.
Update R8300 to version 1.0.2.104 or later.
Update R8500 to version 1.0.2.104 or later.
Update R9000 to version 1.0.2.52 or later.
Update WNDR3700v4 to version 1.0.2.94 or later.
Update WNDR3700v5 to version 1.1.0.50 or later.
Update WNDR4300v1 to version 1.0.2.96 or later.
Update WNDR4300v2 to version 1.0.0.52 or later.
Update WNDR4500v3 to version 1.0.0.52 or later.
Update WNR1000v4 to version 1.1.0.44 or later.
Update WNR2020 to version 1.1.0.44 or later.
Update WNR2050 to version 1.1.0.44 or later.
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
D6220
D6400
D7000
D7000V2
D7800
D8500
Jnr1010V2
Jr6150
Jwnr2010V5
Pr2000
R6050
R6220
R6400
R6400V2
R6700V2
R6800
R6900V2
R7100Lg
R7300Dst
R7500
R7500V2
R7800
R7900P
R8000P
R8300
R8500
R9000
Wndr3700V4
Wndr3700V5
Wndr4300V1
Wndr4300V2
Wndr4500V3
Wnr1000V4
Wnr2020
Wnr2050