Lucene search

[email protected]CVE-2017-18842

HistoryApr 20, 2020 - 4:15 p.m.

CVE-2017-18842

2020-04-2016:15:00

CWE-352

[email protected]

web.nvd.nist.gov

netgear

csrf

vulnerability

nvd

security

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

31.3%

JSON

Certain NETGEAR devices are affected by CSRF. This affects R7300 before 1.0.0.54, R8500 before 1.0.2.94, DGN2200v1 before 1.0.0.55, and D2200D/D2200DW-1FRNAS before 1.0.0.32.

CPENameOperatorVersion
netgear:r7300_firmwarenetgear r7300 firmwarelt1.0.0.54
netgear:r8500_firmwarenetgear r8500 firmwarelt1.0.2.94
netgear:dgn2200_firmwarenetgear dgn2200 firmwarelt1.0.0.55
netgear:d2200d_firmwarenetgear d2200d firmwarelt1.0.0.32
netgear:d2200dw-1frnas_firmwarenetgear d2200dw-1frnas firmwarelt1.0.0.32

CPE	Name	Operator	Version
netgear:r7300_firmware	netgear r7300 firmware	lt	1.0.0.54
netgear:r8500_firmware	netgear r8500 firmware	lt	1.0.2.94
netgear:dgn2200_firmware	netgear dgn2200 firmware	lt	1.0.0.55
netgear:d2200d_firmware	netgear d2200d firmware	lt	1.0.0.32
netgear:d2200dw-1frnas_firmware	netgear d2200dw-1frnas firmware	lt	1.0.0.32

References

kb.netgear.com/000049017/Security-Advisory-for-a-Cross-Site-Request-Forgery-on-Some-Routers-DSL-Gateways-and-a-Modem-Router-PSV-2017-0327

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

31.3%

JSON

Related for CVE-2017-18842

cvelist1 prion1 cnvd1