CVE-2017-18790
MEDIUMNETGEAR R6700/R7000/R7100LG/R7900/R8000/R8500 Firmware - Unauthorized Sensitive Information Exposure
Title source: llmDescription
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R6700 before 1.0.1.26, R7000 before 1.0.9.10, R7100LG before 1.0.0.32, R7900 before 1.0.1.18, R8000 before 1.0.3.54, and R8500 before 1.0.2.100.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
https://kb.netgear.com/000049372/Security-Advisory-for-Sensitive-Information-Disclosure-Vulnerability-on-Some-Routers-PSV-2017-0317
Scores
CVSS v3
6.2
EPSS
0.0014
EPSS Percentile
33.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (6)
netgear/r6700_firmware
< 1.0.1.26
netgear/r7000_firmware
< 1.0.9.10
netgear/r7100lg_firmware
< 1.0.0.32
netgear/r7900_firmware
< 1.0.1.18
netgear/r8000_firmware
< 1.0.3.54
netgear/r8500_firmware
< 1.0.2.100
Published
Apr 21, 2020
Tracked Since
Feb 18, 2026