CVE-2017-18733

HIGH

NETGEAR D6220/D6400/D8500/R6250/R6400/R6400v2/R7100LG/R7300DST/R8300/R8500 - Authentication Bypass

Title source: llm
STIX 2.1

Description

Certain NETGEAR devices are affected by authentication bypass. This affects D6220 before 1.0.0.28, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.8, R6400 before 1.0.1.22, R6400v2 before 1.0.2.32, R7100LG before 1.0.0.32, R7300DST before 1.0.0.52, R8300 before 1.0.2.94, and R8500 before 1.0.2.100.

References (1)

Core 1

Scores

CVSS v3 8.8
EPSS 0.0016
EPSS Percentile 36.5%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-287
Status published
Products (9)
netgear/d6220_firmware < 1.0.0.28
netgear/d6400_firmware < 1.0.0.60
netgear/d8500_firmware < 1.0.3.29
netgear/r6250_firmware < 1.0.4.8
netgear/r6400_firmware < 1.0.1.22
netgear/r7100lg_firmware < 1.0.0.32
netgear/r7300dst_firmware < 1.0.0.52
netgear/r8300_firmware < 1.0.2.94
netgear/r8500_firmware < 1.0.2.100
Published Apr 23, 2020
Tracked Since Feb 18, 2026