PT-2020-8873 · NetGear · Netgear R7800+4

Published 2020-04-24 · Updated 2020-05-01 · CVE-2018-21229

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions NETGEAR R7500v2 versions prior to 1.0.3.20 NETGEAR R7800 versions prior to 1.0.2.38 NETGEAR WN3000RPv3 versions prior to 1.0.2.50 NETGEAR WNDR4300v2 versions prior to 1.0.0.50 NETGEAR WNDR4500v3 versions prior to 1.0.0.50

Description The issue is caused by an incorrect configuration of security settings in certain NETGEAR devices.

Recommendations For R7500v2, update to version 1.0.3.20 or later. For R7800, update to version 1.0.2.38 or later. For WN3000RPv3, update to version 1.0.2.50 or later. For WNDR4300v2, update to version 1.0.0.50 or later. For WNDR4500v3, update to version 1.0.0.50 or later.

Fix

Related Identifiers

CVE-2018-21229

Affected Products

Netgear R7500V2

Netgear R7800

Netgear Wn3000Rpv3

Netgear Wndr4300V2

Netgear Wndr4500V3

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-21229 · Security Note
• https://osv.dev/vulnerability/CVE-2018-21229 · Vendor Advisory
• https://kb.netgear.com/000055105/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-and-Extenders-PSV-2016-0124 · Vendor Advisory