Lucene search

[email protected]NVD:CVE-2017-18864

HistoryMay 05, 2020 - 2:15 p.m.

CVE-2017-18864

2020-05-0514:15:12

CWE-120

[email protected]

web.nvd.nist.gov

5.8 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.4%

JSON

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6400 before 1.0.1.24, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.4, R7000P before 1.0.0.56, R6900P before 1.0.0.56, R7100LG before 1.0.0.32, R7300 before 1.0.0.54, R7900 before 1.0.1.18, R8300 before 1.0.2.104, and R8500 before 1.0.2.104.

Affected configurations

NVD

Node

netgearr6400Match-

AND

netgearr6400_firmwareRange<1.0.1.24

Node

netgearr6400Matchv2

AND

netgearr6400_firmwareRange<1.0.2.32

Node

netgearr6700Match-

AND

netgearr6700_firmwareRange<1.0.1.22

Node

netgearr6900Match-

AND

netgearr6900_firmwareRange<1.0.1.22

Node

netgearr6900pMatch-

AND

netgearr6900p_firmwareRange<1.0.0.56

Node

netgearr7000Match-

AND

netgearr7000_firmwareRange<1.0.9.4

Node

netgearr7000pMatch-

AND

netgearr7000p_firmwareRange<1.0.0.56

Node

netgearr7100lgMatch-

AND

netgearr7100lg_firmwareRange<1.0.0.32

Node

netgearr7300_firmwareRange<1.0.0.54

AND

netgearr7300Match-

Node

netgearr7900_firmwareRange<1.0.1.18

AND

netgearr7900Match-

Node

netgearr8300_firmwareRange<1.0.2.104

AND

netgearr8300Match-

Node

netgearr8500_firmwareRange<1.0.2.104

AND

netgearr8500Match-

References

kb.netgear.com/000051495/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Routers-PSV-2017-0791

5.8 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.4%

JSON

Related for NVD:CVE-2017-18864

cvelist2 cve3 prion2 nvd2