CVE-2017-18797
MEDIUMNETGEAR R6400/R7900/R8000/R8500 Firmware - Unauthenticated Arbitrary File Read
Title source: llmDescription
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects R6400 before 1.0.1.24, R7900 before 1.0.1.18, R8000 before 1.0.3.54, and R8500 before 1.0.2.100.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
https://kb.netgear.com/000049365/Security-Advisory-for-Arbitrary-File-Read-Vulnerability-on-Some-Routers-PSV-2017-0318
Scores
CVSS v3
6.2
EPSS
0.0034
EPSS Percentile
25.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (4)
netgear/r6400_firmware
< 1.0.1.24
netgear/r7900_firmware
< 1.0.1.18
netgear/r8000_firmware
< 1.0.3.54
netgear/r8500_firmware
< 1.0.2.100
Published
Apr 21, 2020
Tracked Since
Feb 18, 2026