PT-2020-8338 · NetGear · D6400+9

Published 2020-04-22 · Updated 2020-04-23 · CVE-2017-18789

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AC:L/AV:L/A:N/C:H/I:N/PR:N/S:U/UI:N

Name of the Vulnerable Software and Affected Versions: R6250 versions prior to V1.0.4.8 R6400 versions prior to V1.0.1.22 R6400v2 versions prior to V1.0.2.32 R7100LG versions prior to V1.0.0.32 R7300 versions prior to V1.0.0.52 R8300 versions prior to V1.0.2.94 R8500 versions prior to V1.0.2.100 D6220 versions prior to V1.0.0.28 D6400 versions prior to V1.0.0.60 D8500 versions prior to V1.0.3.29

Description: Certain NETGEAR devices are affected by disclosure of sensitive information.

Recommendations: For R6250, update to V1.0.4.8 or later. For R6400, update to V1.0.1.22 or later. For R6400v2, update to V1.0.2.32 or later. For R7100LG, update to V1.0.0.32 or later. For R7300, update to V1.0.0.52 or later. For R8300, update to V1.0.2.94 or later. For R8500, update to V1.0.2.100 or later. For D6220, update to V1.0.0.28 or later. For D6400, update to V1.0.0.60 or later. For D8500, update to V1.0.3.29 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-18789

Affected Products

D6220

D6400

D8500

R6250

R6400

R6400V2

R7100Lg

R7300

R8300

R8500

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-18789 · Security Note
• https://kb.netgear.com/000049373/Security-Advisory-for-Sensitive-Information-Disclosure-Vulnerability-on-Some-Routers-and-Some-DSL-Modem-Routers-PSV-2017-0426 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-18789 · Vendor Advisory
• https://t.me/cibsecurity/11506 · Telegram Post