CVE-2017-18708

HIGH

NETGEAR R8300 and R8500 Firmware < 1.0.2.94 - Cross-Site Request Forgery

Title source: llm
STIX 2.1

Description

Certain NETGEAR devices are affected by CSRF. This affects R8300 before 1.0.2.94 and R8500 before 1.0.2.94.

References (1)

Core 1

Scores

CVSS v3 8.8
EPSS 0.0017
EPSS Percentile 37.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-352
Status published
Products (2)
netgear/r8300_firmware < 1.0.2.94
netgear/r8500_firmware < 1.0.2.94
Published Apr 24, 2020
Tracked Since Feb 18, 2026