Lucene search

[email protected]CVE-2017-18741

HistoryApr 23, 2020 - 4:15 p.m.

CVE-2017-18741

2020-04-2316:15:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2017-18741

netgear

security settings

vulnerability

nvd

6.5 Medium

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 High

AI Score

Confidence

Low

3.3 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

30.4%

JSON

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6250 before 1.0.4.8, R6300v2 before 1.0.4.8, R6700 before 1.0.1.20, R7000 before 1.0.7.10, R7000P before 1.0.0.58, R6900P before 1.0.0.58, R7100LG before 1.0.0.32, R7900 before 1.0.1.14, R8000 before 1.0.3.22, and R8500 before 1.0.2.94.

CPENameOperatorVersion
netgear:r6250_firmwarenetgear r6250 firmwarelt1.0.4.8
netgear:r6300_firmwarenetgear r6300 firmwarelt1.0.4.8
netgear:r6700_firmwarenetgear r6700 firmwarelt1.0.1.20
netgear:r7000_firmwarenetgear r7000 firmwarelt1.0.7.10
netgear:r7000p_firmwarenetgear r7000p firmwarelt1.0.0.58
netgear:r6900p_firmwarenetgear r6900p firmwarelt1.0.0.58
netgear:r7100lg_firmwarenetgear r7100lg firmwarelt1.0.0.32
netgear:r7900_firmwarenetgear r7900 firmwarelt1.0.1.14
netgear:r8000_firmwarenetgear r8000 firmwarelt1.0.3.22
netgear:r8500_firmwarenetgear r8500 firmwarelt1.0.2.94

CPE	Name	Operator	Version
netgear:r6250_firmware	netgear r6250 firmware	lt	1.0.4.8
netgear:r6300_firmware	netgear r6300 firmware	lt	1.0.4.8
netgear:r6700_firmware	netgear r6700 firmware	lt	1.0.1.20
netgear:r7000_firmware	netgear r7000 firmware	lt	1.0.7.10
netgear:r7000p_firmware	netgear r7000p firmware	lt	1.0.0.58
netgear:r6900p_firmware	netgear r6900p firmware	lt	1.0.0.58
netgear:r7100lg_firmware	netgear r7100lg firmware	lt	1.0.0.32
netgear:r7900_firmware	netgear r7900 firmware	lt	1.0.1.14
netgear:r8000_firmware	netgear r8000 firmware	lt	1.0.3.22
netgear:r8500_firmware	netgear r8500 firmware	lt	1.0.2.94

References

kb.netgear.com/000051514/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-PSV-2017-0335

6.5 Medium

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 High

AI Score

Confidence

Low

3.3 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

30.4%

JSON

Related for CVE-2017-18741

cvelist1 prion1