CVE-2017-18709

HIGH

NETGEAR R8300 and R8500 Firmware < 1.0.2.94 - Security Misconfiguration

Title source: llm

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R8300 before 1.0.2.94 and R8500 before 1.0.2.94.

Core 1

Core References

Vendor Advisory x_refsource_confirm

CVSS v3 7.8

EPSS 0.0004

EPSS Percentile 12.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Status published

Products (2)

netgear/r8300_firmware < 1.0.2.94

netgear/r8500_firmware < 1.0.2.94

Published Apr 24, 2020

Tracked Since Feb 18, 2026