PT-2020-8339 · NetGear · Netgear R7900+5

Published 2020-04-21 · Updated 2020-04-27 · CVE-2017-18790

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AC:L/AV:L/A:N/C:H/I:N/PR:N/S:U/UI:N

Name of the Vulnerable Software and Affected Versions: NETGEAR R6700 versions prior to 1.0.1.26 NETGEAR R7000 versions prior to 1.0.9.10 NETGEAR R7100LG versions prior to 1.0.0.32 NETGEAR R7900 versions prior to 1.0.1.18 NETGEAR R8000 versions prior to 1.0.3.54 NETGEAR R8500 versions prior to 1.0.2.100

Description: The issue concerns the disclosure of sensitive information in certain NETGEAR devices.

Recommendations: For NETGEAR R6700 version prior to 1.0.1.26, update to version 1.0.1.26 or later. For NETGEAR R7000 version prior to 1.0.9.10, update to version 1.0.9.10 or later. For NETGEAR R7100LG version prior to 1.0.0.32, update to version 1.0.0.32 or later. For NETGEAR R7900 version prior to 1.0.1.18, update to version 1.0.1.18 or later. For NETGEAR R8000 version prior to 1.0.3.54, update to version 1.0.3.54 or later. For NETGEAR R8500 version prior to 1.0.2.100, update to version 1.0.2.100 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-18790

Affected Products

Netgear R6700

Netgear R7000

Netgear R7100Lg

Netgear R7900

Netgear R8000

Netgear R8500

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-18790 · Security Note
• https://osv.dev/vulnerability/CVE-2017-18790 · Vendor Advisory
• https://kb.netgear.com/000049372/Security-Advisory-for-Sensitive-Information-Disclosure-Vulnerability-on-Some-Routers-PSV-2017-0317 · Vendor Advisory
• https://t.me/cvenotify/2982 · Telegram Post
• https://t.me/cibsecurity/11488 · Telegram Post