Lucene search

[email protected]CVE-2017-18846

HistoryApr 20, 2020 - 4:15 p.m.

CVE-2017-18846

2020-04-2016:15:00

CWE-787

[email protected]

web.nvd.nist.gov

cve-2017-18846

netgear

buffer overflow

r6250

r6400v2

r7000p

r6900p

r7900

r8300

r8500

d8500

nvd

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

12.3%

JSON

Certain NETGEAR devices are affected by a stack-based buffer overflow. This affects R6250 before 1.0.4.12, R6400v2 before 1.0.2.32, R7000P/R6900P before 1.0.0.56, R7900 before 1.0.1.18, R8300 before 1.0.2.100_1.0.82, R8500 before 1.0.2.100_1.0.82, and D8500 before 1.0.3.29.

CPENameOperatorVersion
netgear:r6250_firmwarenetgear r6250 firmwarelt1.0.4.12
netgear:r6400_firmwarenetgear r6400 firmwarelt1.0.2.32
netgear:r7000p_firmwarenetgear r7000p firmwarelt1.0.0.56
netgear:r6900p_firmwarenetgear r6900p firmwarelt1.0.0.56
netgear:r7900_firmwarenetgear r7900 firmwarelt1.0.1.18
netgear:r8300_firmwarenetgear r8300 firmwarelt1.0.2.100_1.0.82
netgear:r8500_firmwarenetgear r8500 firmwarelt1.0.2.100_1.0.82
netgear:d8500_firmwarenetgear d8500 firmwarelt1.0.3.29

CPE	Name	Operator	Version
netgear:r6250_firmware	netgear r6250 firmware	lt	1.0.4.12
netgear:r6400_firmware	netgear r6400 firmware	lt	1.0.2.32
netgear:r7000p_firmware	netgear r7000p firmware	lt	1.0.0.56
netgear:r6900p_firmware	netgear r6900p firmware	lt	1.0.0.56
netgear:r7900_firmware	netgear r7900 firmware	lt	1.0.1.18
netgear:r8300_firmware	netgear r8300 firmware	lt	1.0.2.100_1.0.82
netgear:r8500_firmware	netgear r8500 firmware	lt	1.0.2.100_1.0.82
netgear:d8500_firmware	netgear d8500 firmware	lt	1.0.3.29

References

kb.netgear.com/000049013/Security-Advisory-for-Stack-Overflow-on-Some-Routers-PSV-PSV-2017-0793

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

12.3%

JSON

Related for CVE-2017-18846

cvelist1 prion1