CVE-2017-18712

MEDIUM

NETGEAR R7800/R9000/R7500/WNDR4300/WNDR4500/R6100/D7800 Firmware - Arbitrary File Read

Title source: llm
STIX 2.1

Description

Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D7800 before 1.0.1.28, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR4300v2 before 1.0.0.48, and WNDR4500v3 before 1.0.0.48.

References (1)

Core 1

Scores

CVSS v3 6.5
EPSS 0.0018
EPSS Percentile 39.3%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (7)
netgear/d7800_firmware < 1.0.1.28
netgear/r6100_firmware < 1.0.1.20
netgear/r7500_firmware < 1.0.0.118
netgear/r7800_firmware < 1.0.2.40
netgear/r9000_firmware < 1.0.2.52
netgear/wndr4300_firmware < 1.0.0.48
netgear/wndr4500_firmware < 1.0.0.48
Published Apr 24, 2020
Tracked Since Feb 18, 2026