PT-2020-8813 · NetGear · Netgear R7800+28

Published 2020-04-27 · Updated 2020-05-04 · CVE-2018-21169

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NETGEAR D7000 versions before 2018-03-01 NETGEAR D7800 versions before 1.0.1.31 NETGEAR D8500 versions before 1.0.3.36 NETGEAR JNR1010v2 versions before 1.1.0.46 NETGEAR JR6150 versions before 1.0.1.14 NETGEAR JWNR2010v5 versions before 1.1.0.46 NETGEAR PR2000 versions before 2018-03-01 NETGEAR R6050 versions before 1.0.1.14 NETGEAR R6220 versions before 1.1.0.60 NETGEAR R6400 versions before 1.1.0.26 NETGEAR R6400v2 versions before 1.0.2.46 NETGEAR R6700v2 versions before 1.2.0.2 NETGEAR R6800 versions before 1.2.0.2 NETGEAR R6900v2 versions before 1.2.0.2 NETGEAR R7300DST versions before 1.0.0.56 NETGEAR R7500 versions before 1.0.0.112 NETGEAR R7500v2 versions before 1.0.3.24 NETGEAR R7800 versions before 1.0.2.36 NETGEAR R7900P versions before 1.1.4.6 NETGEAR R8000P versions before 1.1.4.6 NETGEAR R8300 versions before 1.0.2.104 NETGEAR R8500 versions before 1.0.2.104 NETGEAR R9000 versions before 1.0.2.52 NETGEAR WNDR3700v4 versions before 1.0.2.94 NETGEAR WNDR3700v5 versions before 1.1.0.50 NETGEAR WNDR4300 versions before 1.0.2.96 NETGEAR WNDR4300v2 versions before 1.0.0.52 NETGEAR WNDR4500v3 versions before 1.0.0.52 NETGEAR WNR1000v4 versions before 1.1.0.46 NETGEAR WNR2020 versions before 1.1.0.46 NETGEAR WNR2050 versions before 1.1.0.46

Description Certain NETGEAR devices are affected by incorrect configuration of security settings.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2018-21169

Affected Products

Netgear R7000

Netgear R7800

Netgear R8500

Netgear Jnr1010V2

Netgear Jr6150

Netgear Jwnr2010V5

Netgear Pr2000

Netgear R6050

Netgear R6220

Netgear R6400

Netgear R6400V2

Netgear R6700V2

Netgear R6800

Netgear R6900V2

Netgear R7300Dst

Netgear R7500

Netgear R7500V2

Netgear R7900

Netgear R8000

Netgear R8300

Netgear R9000

Netgear Wndr3700V4

Netgear Wndr3700V5

Netgear Wndr4300

Netgear Wndr4300V2

Netgear Wndr4500V3

Netgear Wnr1000V4

Netgear Wnr2020

Netgear Wnr2050

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-21169 · Security Note
• https://kb.netgear.com/000055189/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-Gateways-and-Extenders-PSV-2017-2913 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-21169 · Vendor Advisory
• https://t.me/cvenotify/3273 · Telegram Post