CVE-2017-18797
MEDIUMNETGEAR R6400/R7900/R8000/R8500 Firmware - Unauthenticated Arbitrary File Read
Title source: llmDescription
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects R6400 before 1.0.1.24, R7900 before 1.0.1.18, R8000 before 1.0.3.54, and R8500 before 1.0.2.100.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
https://kb.netgear.com/000049365/Security-Advisory-for-Arbitrary-File-Read-Vulnerability-on-Some-Routers-PSV-2017-0318
Scores
CVSS v3
6.2
EPSS
0.0006
EPSS Percentile
18.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (4)
netgear/r6400_firmware
< 1.0.1.24
netgear/r7900_firmware
< 1.0.1.18
netgear/r8000_firmware
< 1.0.3.54
netgear/r8500_firmware
< 1.0.2.100
Published
Apr 21, 2020
Tracked Since
Feb 18, 2026