CVE-2017-18848

HIGH

NETGEAR R6300v2/R7300/R8500/AC1450 Firmware - Cross-Site Request Forgery

Title source: llm
STIX 2.1

Description

Certain NETGEAR devices are affected by CSRF. This affects R6300v2 before 1.0.0.36, AC1450 before 1.0.0.36, R7300 before 1.0.0.54, and R8500 before 1.0.2.94.

References (1)

Core 1

Scores

CVSS v3 8.8
EPSS 0.0017
EPSS Percentile 37.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-352
Status published
Products (4)
netgear/ac1450_firmware < 1.0.0.36
netgear/r6300_firmware < 1.0.0.36
netgear/r7300_firmware < 1.0.0.54
netgear/r8500_firmware < 1.0.2.94
Published Apr 20, 2020
Tracked Since Feb 18, 2026