CVE-2017-18713

MEDIUM

NETGEAR R7800/R9000/WNDR4300/WNDR4500/D7800/R7500/R6700/R6900 Firmware - Unauthenticated Arbitrary File Read

Title source: llm
STIX 2.1

Description

Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D7800 before 1.0.1.28, R6700 before 1.0.1.36, R6900 before 1.0.1.34, R7500v2 before 1.0.3.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR4300v2 before 1.0.0.48, and WNDR4500v3 before 1.0.0.48.

References (1)

Core 1

Scores

CVSS v3 6.5
EPSS 0.0009
EPSS Percentile 26.1%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (8)
netgear/d7800_firmware < 1.0.1.28
netgear/r6700_firmware < 1.0.1.36
netgear/r6900_firmware < 1.0.1.34
netgear/r7500_firmware < 1.0.3.20
netgear/r7800_firmware < 1.0.2.40
netgear/r9000_firmware < 1.0.2.52
netgear/wndr4300_firmware < 1.0.0.48
netgear/wndr4500_firmware < 1.0.0.48
Published Apr 24, 2020
Tracked Since Feb 18, 2026