PT-2020-8414 · NetGear · Netgear R7800+4

Joel St. John · Published 2020-05-05 · Updated 2020-05-07 · CVE-2017-18867

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AC:L/AV:P/A:H/C:H/I:H/PR:N/S:U/UI:N

Name of the Vulnerable Software and Affected Versions: NETGEAR D6100 versions prior to 1.0.0.55 NETGEAR D7800 versions prior to V1.0.1.24 NETGEAR R7100LG versions prior to V1.0.0.32 NETGEAR WNDR4300v1 versions prior to 1.0.2.90 NETGEAR WNDR4500v3 versions prior to 1.0.0.48

Description: The issue is related to the incorrect configuration of security settings in certain NETGEAR devices.

Recommendations: For NETGEAR D6100 version prior to 1.0.0.55, update to version 1.0.0.55 or later. For NETGEAR D7800 version prior to V1.0.1.24, update to version V1.0.1.24 or later. For NETGEAR R7100LG version prior to V1.0.0.32, update to version V1.0.0.32 or later. For NETGEAR WNDR4300v1 version prior to 1.0.2.90, update to version 1.0.2.90 or later. For NETGEAR WNDR4500v3 version prior to 1.0.0.48, update to version 1.0.0.48 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2017-18867

Affected Products

Netgear R6100

Netgear R7800

Netgear R7100Lg

Netgear Wndr4300V1

Netgear Wndr4500V3

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-18867 · Security Note
• https://kb.netgear.com/000049554/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-and-Gateways-PSV-2017-2198 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-18867 · Vendor Advisory
• https://t.me/cibsecurity/11835 · Telegram Post
• https://t.me/cvenotify/3562 · Telegram Post