PT-2020-8347 · NetGear · Netgear R6700V2+3

Published 2020-04-21 · Updated 2020-04-24 · CVE-2017-18798

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AC:L/AV:L/A:H/C:H/I:H/PR:N/S:U/UI:N

Name of the Vulnerable Software and Affected Versions: NETGEAR R6700v2 versions prior to 1.1.0.38 NETGEAR R6800 versions prior to 1.1.0.38 NETGEAR D7000 versions prior to 1.0.1.50 NETGEAR D1500 versions prior to 1.0.0.25

Description: The issue is related to an incorrect configuration of security settings in certain NETGEAR devices.

Recommendations: For NETGEAR R6700v2 versions prior to 1.1.0.38, update to version 1.1.0.38 or later. For NETGEAR R6800 versions prior to 1.1.0.38, update to version 1.1.0.38 or later. For NETGEAR D7000 versions prior to 1.0.1.50, update to version 1.0.1.50 or later. For NETGEAR D1500 versions prior to 1.0.0.25, update to version 1.0.0.25 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2017-18798

Affected Products

Netgear D1500

Netgear R7000

Netgear R6700V2

Netgear R6800

References · 5

• https://osv.dev/vulnerability/CVE-2017-18798 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-18798 · Security Note
• https://kb.netgear.com/000049358/Security-Advisory-for-Security-Misconfiguration-Vulnerability-on-Some-Routers-and-Some-DSL-Modem-Routers-PSV-2017-2159 · Vendor Advisory
• https://t.me/cibsecurity/11480 · Telegram Post
• https://t.me/cvenotify/2990 · Telegram Post