CVE-2017-18769
Severity Score
4.6
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D6220 before 1.0.0.40, D6400 before 1.0.0.74, D7000 before 1.0.1.60, D7800 before 1.0.1.34, D8500 before 1.0.3.39, DGN2200v4 before 1.0.0.94, DGN2200Bv4 before 1.0.0.94, EX6200v2 before 1.0.1.50, EX7000 before 1.0.0.56, JR6150 before 1.0.1.18, R6050 before 1.0.1.10J, R6100 before 1.0.1.16, R6150 before 1.0.1.10, R6220 before 1.1.0.50, R6250 before 1.0.4.12, R6300v2 before 1.0.4.12, R6400 before 1.0.1.24, R6400v2 before 1.0.2.32, R6700 before 1.0.1.26, R6700v2 before 1.2.0.4, R6800 before 1.0.1.10, R6900 before 1.0.1.26, R6900P before 1.0.0.58, R6900v2 before 1.2.0.4, R7000 before 1.0.9.6, R7000P before 1.0.0.58, R7100LG before 1.0.0.32, R7300 before 1.0.0.54, R7500 before 1.0.0.112, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, R7900 before 1.0.1.18, R8000 before 1.0.3.48, R8300 before 1.0.2.104, R8500 before 1.0.2.104, R9000 before 1.0.2.40, WNDR3400v3 before 1.0.1.14, WNDR3700v4 before 1.0.2.96, WNDR4300v1 before 1.0.2.98, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR3500Lv2 before 1.2.0.44.
Determinados dispositivos NETGEAR están afectados por una capacidad del atacante para leer archivos arbitrarios. Esto afecta a D6220 versiones anteriores a 1.0.0.40, D6400 versiones anteriores a 1.0.0.74, D7000 versiones anteriores a 1.0.1.60, D7800 versiones anteriores a 1.0.1.34, D8500 versiones anteriores a 1.0.3.39, DGN2200v4 versiones anteriores a 1.0.0.94, DGN2200Bv4 versiones anteriores a 1.0.0.94, EX6200v2 versiones anteriores a 1.0.1.50, EX7000 versiones anteriores a 1.0.0.56, JR6150 versiones anteriores a 1.0.1.18, R6050 versiones anteriores a 1.0.1.10J, R6100 versiones anteriores a 1.0.1.16, R6150 versiones anteriores a 1.0.1.10, R6220 versiones anteriores a 1.1.0.50, R6250 versiones anteriores a 1.0.4.12, R6300v2 versiones anteriores a 1.0.4.12, R6400 versiones anteriores a 1.0.1.24, R6400v2 versiones anteriores a 1.0.2.32, R6700 versiones anteriores a 1.0.1.26, R6700v2 versiones anteriores a 1.2.0.4, R6800 versiones anteriores a 1.0.1.10, R6900 versiones anteriores a 1.0.1.26, R6900P versiones anteriores a 1.0.0.58, R6900v2 versiones anteriores a 1.2.0.4, R7000 versiones anteriores a 1.0 .9.6, R7000P versiones anteriores a 1.0.0.58, R7100LG versiones anteriores a 1.0.0.32, R7300 versiones anteriores a 1.0.0.54, R7500 versiones anteriores a 1.0.0.112, R7500v2 versiones anteriores a 1.0.3.20, R7800 versiones anteriores a 1.0.2.36, R7900 versiones anteriores a 1.0.1.18, R8000 versiones anteriores a 1.0.3.48 , R8300 versiones anteriores a 1.0.2.104, R8500 versiones anteriores a 1.0.2.104, R9000 versiones anteriores a 1.0.2.40, WNDR3400v3 versiones anteriores a 1.0.1.14, WNDR3700v4 versiones anteriores a 1.0.2.96, WNDR4300v1 versiones anteriores a 1.0.2.98, WNDR4300v2 versiones anteriores a 1.0.0.48, WNDR4500v3 versiones anteriores a 1.0.0.48 y WNR3500Lv2 versiones anteriores a 1.2.0.44.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-04-20 CVE Reserved
- 2020-04-22 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Netgear Search vendor "Netgear" | D6220 Firmware Search vendor "Netgear" for product "D6220 Firmware" | < 1.0.0.40 Search vendor "Netgear" for product "D6220 Firmware" and version " < 1.0.0.40" | - |
Affected
| in | Netgear Search vendor "Netgear" | D6220 Search vendor "Netgear" for product "D6220" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | D6400 Firmware Search vendor "Netgear" for product "D6400 Firmware" | < 1.0.0.74 Search vendor "Netgear" for product "D6400 Firmware" and version " < 1.0.0.74" | - |
Affected
| in | Netgear Search vendor "Netgear" | D6400 Search vendor "Netgear" for product "D6400" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | D7000 Firmware Search vendor "Netgear" for product "D7000 Firmware" | < 1.0.1.60 Search vendor "Netgear" for product "D7000 Firmware" and version " < 1.0.1.60" | - |
Affected
| in | Netgear Search vendor "Netgear" | D7000 Search vendor "Netgear" for product "D7000" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | D7800 Firmware Search vendor "Netgear" for product "D7800 Firmware" | < 1.0.1.34 Search vendor "Netgear" for product "D7800 Firmware" and version " < 1.0.1.34" | - |
Affected
| in | Netgear Search vendor "Netgear" | D7800 Search vendor "Netgear" for product "D7800" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | D8500 Firmware Search vendor "Netgear" for product "D8500 Firmware" | < 1.0.3.39 Search vendor "Netgear" for product "D8500 Firmware" and version " < 1.0.3.39" | - |
Affected
| in | Netgear Search vendor "Netgear" | D8500 Search vendor "Netgear" for product "D8500" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Dgn2200 Firmware Search vendor "Netgear" for product "Dgn2200 Firmware" | < 1.0.0.94 Search vendor "Netgear" for product "Dgn2200 Firmware" and version " < 1.0.0.94" | - |
Affected
| in | Netgear Search vendor "Netgear" | Dgn2200 Search vendor "Netgear" for product "Dgn2200" | v4 Search vendor "Netgear" for product "Dgn2200" and version "v4" | - |
Safe
|
| Netgear Search vendor "Netgear" | Dgn2200b Firmware Search vendor "Netgear" for product "Dgn2200b Firmware" | < 1.0.0.94 Search vendor "Netgear" for product "Dgn2200b Firmware" and version " < 1.0.0.94" | - |
Affected
| in | Netgear Search vendor "Netgear" | Dgn2200b Search vendor "Netgear" for product "Dgn2200b" | v4 Search vendor "Netgear" for product "Dgn2200b" and version "v4" | - |
Safe
|
| Netgear Search vendor "Netgear" | Ex6200 Firmware Search vendor "Netgear" for product "Ex6200 Firmware" | < 1.0.1.50 Search vendor "Netgear" for product "Ex6200 Firmware" and version " < 1.0.1.50" | - |
Affected
| in | Netgear Search vendor "Netgear" | Ex6200 Search vendor "Netgear" for product "Ex6200" | v2 Search vendor "Netgear" for product "Ex6200" and version "v2" | - |
Safe
|
| Netgear Search vendor "Netgear" | Ex7000 Firmware Search vendor "Netgear" for product "Ex7000 Firmware" | < 1.0.0.56 Search vendor "Netgear" for product "Ex7000 Firmware" and version " < 1.0.0.56" | - |
Affected
| in | Netgear Search vendor "Netgear" | Ex7000 Search vendor "Netgear" for product "Ex7000" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Jr6150 Firmware Search vendor "Netgear" for product "Jr6150 Firmware" | < 1.0.1.18 Search vendor "Netgear" for product "Jr6150 Firmware" and version " < 1.0.1.18" | - |
Affected
| in | Netgear Search vendor "Netgear" | Jr6150 Search vendor "Netgear" for product "Jr6150" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6050 Firmware Search vendor "Netgear" for product "R6050 Firmware" | < 1.0.1.10j Search vendor "Netgear" for product "R6050 Firmware" and version " < 1.0.1.10j" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6050 Search vendor "Netgear" for product "R6050" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6100 Firmware Search vendor "Netgear" for product "R6100 Firmware" | < 1.0.1.16 Search vendor "Netgear" for product "R6100 Firmware" and version " < 1.0.1.16" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6100 Search vendor "Netgear" for product "R6100" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6150 Firmware Search vendor "Netgear" for product "R6150 Firmware" | < 1.0.1.10 Search vendor "Netgear" for product "R6150 Firmware" and version " < 1.0.1.10" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6150 Search vendor "Netgear" for product "R6150" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6220 Firmware Search vendor "Netgear" for product "R6220 Firmware" | < 1.1.0.50 Search vendor "Netgear" for product "R6220 Firmware" and version " < 1.1.0.50" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6220 Search vendor "Netgear" for product "R6220" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6250 Firmware Search vendor "Netgear" for product "R6250 Firmware" | < 1.0.4.12 Search vendor "Netgear" for product "R6250 Firmware" and version " < 1.0.4.12" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6250 Search vendor "Netgear" for product "R6250" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6300 Firmware Search vendor "Netgear" for product "R6300 Firmware" | < 1.0.4.12 Search vendor "Netgear" for product "R6300 Firmware" and version " < 1.0.4.12" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6300 Search vendor "Netgear" for product "R6300" | v2 Search vendor "Netgear" for product "R6300" and version "v2" | - |
Safe
|
| Netgear Search vendor "Netgear" | R6400 Firmware Search vendor "Netgear" for product "R6400 Firmware" | < 1.0.1.24 Search vendor "Netgear" for product "R6400 Firmware" and version " < 1.0.1.24" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6400 Search vendor "Netgear" for product "R6400" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6400 Firmware Search vendor "Netgear" for product "R6400 Firmware" | < 1.0.2.32 Search vendor "Netgear" for product "R6400 Firmware" and version " < 1.0.2.32" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6400 Search vendor "Netgear" for product "R6400" | v2 Search vendor "Netgear" for product "R6400" and version "v2" | - |
Safe
|
| Netgear Search vendor "Netgear" | R6700 Firmware Search vendor "Netgear" for product "R6700 Firmware" | < 1.0.1.26 Search vendor "Netgear" for product "R6700 Firmware" and version " < 1.0.1.26" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6700 Search vendor "Netgear" for product "R6700" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6700 Firmware Search vendor "Netgear" for product "R6700 Firmware" | < 1.2.0.4 Search vendor "Netgear" for product "R6700 Firmware" and version " < 1.2.0.4" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6700 Search vendor "Netgear" for product "R6700" | v2 Search vendor "Netgear" for product "R6700" and version "v2" | - |
Safe
|
| Netgear Search vendor "Netgear" | R6800 Firmware Search vendor "Netgear" for product "R6800 Firmware" | < 1.0.1.10 Search vendor "Netgear" for product "R6800 Firmware" and version " < 1.0.1.10" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6800 Search vendor "Netgear" for product "R6800" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6900 Firmware Search vendor "Netgear" for product "R6900 Firmware" | < 1.0.1.26 Search vendor "Netgear" for product "R6900 Firmware" and version " < 1.0.1.26" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6900 Search vendor "Netgear" for product "R6900" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6900p Firmware Search vendor "Netgear" for product "R6900p Firmware" | < 1.0.0.58 Search vendor "Netgear" for product "R6900p Firmware" and version " < 1.0.0.58" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6900p Search vendor "Netgear" for product "R6900p" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6900 Firmware Search vendor "Netgear" for product "R6900 Firmware" | < 1.2.0.4 Search vendor "Netgear" for product "R6900 Firmware" and version " < 1.2.0.4" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6900 Search vendor "Netgear" for product "R6900" | v2 Search vendor "Netgear" for product "R6900" and version "v2" | - |
Safe
|
| Netgear Search vendor "Netgear" | R7000 Firmware Search vendor "Netgear" for product "R7000 Firmware" | < 1.0.9.6 Search vendor "Netgear" for product "R7000 Firmware" and version " < 1.0.9.6" | - |
Affected
| in | Netgear Search vendor "Netgear" | R7000 Search vendor "Netgear" for product "R7000" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R7000p Firmware Search vendor "Netgear" for product "R7000p Firmware" | < 1.0.0.58 Search vendor "Netgear" for product "R7000p Firmware" and version " < 1.0.0.58" | - |
Affected
| in | Netgear Search vendor "Netgear" | R7000p Search vendor "Netgear" for product "R7000p" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R7100lg Firmware Search vendor "Netgear" for product "R7100lg Firmware" | < 1.0.0.32 Search vendor "Netgear" for product "R7100lg Firmware" and version " < 1.0.0.32" | - |
Affected
| in | Netgear Search vendor "Netgear" | R7100lg Search vendor "Netgear" for product "R7100lg" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R7300 Firmware Search vendor "Netgear" for product "R7300 Firmware" | < 1.0.0.54 Search vendor "Netgear" for product "R7300 Firmware" and version " < 1.0.0.54" | - |
Affected
| in | Netgear Search vendor "Netgear" | R7300 Search vendor "Netgear" for product "R7300" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R7500 Firmware Search vendor "Netgear" for product "R7500 Firmware" | < 1.0.0.112 Search vendor "Netgear" for product "R7500 Firmware" and version " < 1.0.0.112" | - |
Affected
| in | Netgear Search vendor "Netgear" | R7500 Search vendor "Netgear" for product "R7500" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R7500 Firmware Search vendor "Netgear" for product "R7500 Firmware" | < 1.0.3.20 Search vendor "Netgear" for product "R7500 Firmware" and version " < 1.0.3.20" | - |
Affected
| in | Netgear Search vendor "Netgear" | R7500 Search vendor "Netgear" for product "R7500" | v2 Search vendor "Netgear" for product "R7500" and version "v2" | - |
Safe
|
| Netgear Search vendor "Netgear" | R7800 Firmware Search vendor "Netgear" for product "R7800 Firmware" | < 1.0.2.36 Search vendor "Netgear" for product "R7800 Firmware" and version " < 1.0.2.36" | - |
Affected
| in | Netgear Search vendor "Netgear" | R7800 Search vendor "Netgear" for product "R7800" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R7900 Firmware Search vendor "Netgear" for product "R7900 Firmware" | < 1.0.1.18 Search vendor "Netgear" for product "R7900 Firmware" and version " < 1.0.1.18" | - |
Affected
| in | Netgear Search vendor "Netgear" | R7900 Search vendor "Netgear" for product "R7900" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R8000 Firmware Search vendor "Netgear" for product "R8000 Firmware" | < 1.0.3.48 Search vendor "Netgear" for product "R8000 Firmware" and version " < 1.0.3.48" | - |
Affected
| in | Netgear Search vendor "Netgear" | R8000 Search vendor "Netgear" for product "R8000" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R8300 Firmware Search vendor "Netgear" for product "R8300 Firmware" | < 1.0.2.104 Search vendor "Netgear" for product "R8300 Firmware" and version " < 1.0.2.104" | - |
Affected
| in | Netgear Search vendor "Netgear" | R8300 Search vendor "Netgear" for product "R8300" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R8500 Firmware Search vendor "Netgear" for product "R8500 Firmware" | < 1.0.2.104 Search vendor "Netgear" for product "R8500 Firmware" and version " < 1.0.2.104" | - |
Affected
| in | Netgear Search vendor "Netgear" | R8500 Search vendor "Netgear" for product "R8500" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R9000 Firmware Search vendor "Netgear" for product "R9000 Firmware" | < 1.0.2.40 Search vendor "Netgear" for product "R9000 Firmware" and version " < 1.0.2.40" | - |
Affected
| in | Netgear Search vendor "Netgear" | R9000 Search vendor "Netgear" for product "R9000" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wndr3400 Firmware Search vendor "Netgear" for product "Wndr3400 Firmware" | < 1.0.1.14 Search vendor "Netgear" for product "Wndr3400 Firmware" and version " < 1.0.1.14" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wndr3400 Search vendor "Netgear" for product "Wndr3400" | v3 Search vendor "Netgear" for product "Wndr3400" and version "v3" | - |
Safe
|
| Netgear Search vendor "Netgear" | Wndr3700 Firmware Search vendor "Netgear" for product "Wndr3700 Firmware" | < 1.0.2.96 Search vendor "Netgear" for product "Wndr3700 Firmware" and version " < 1.0.2.96" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wndr3700 Search vendor "Netgear" for product "Wndr3700" | v4 Search vendor "Netgear" for product "Wndr3700" and version "v4" | - |
Safe
|
| Netgear Search vendor "Netgear" | Wndr4300 Firmware Search vendor "Netgear" for product "Wndr4300 Firmware" | < 1.0.2.98 Search vendor "Netgear" for product "Wndr4300 Firmware" and version " < 1.0.2.98" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wndr4300 Search vendor "Netgear" for product "Wndr4300" | v1 Search vendor "Netgear" for product "Wndr4300" and version "v1" | - |
Safe
|
| Netgear Search vendor "Netgear" | Wndr4300 Firmware Search vendor "Netgear" for product "Wndr4300 Firmware" | < 1.0.0.48 Search vendor "Netgear" for product "Wndr4300 Firmware" and version " < 1.0.0.48" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wndr4300 Search vendor "Netgear" for product "Wndr4300" | v2 Search vendor "Netgear" for product "Wndr4300" and version "v2" | - |
Safe
|
| Netgear Search vendor "Netgear" | Wndr4500 Firmware Search vendor "Netgear" for product "Wndr4500 Firmware" | < 1.0.0.48 Search vendor "Netgear" for product "Wndr4500 Firmware" and version " < 1.0.0.48" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wndr4500 Search vendor "Netgear" for product "Wndr4500" | v3 Search vendor "Netgear" for product "Wndr4500" and version "v3" | - |
Safe
|
| Netgear Search vendor "Netgear" | Wnr3500l Firmware Search vendor "Netgear" for product "Wnr3500l Firmware" | < 1.2.0.44 Search vendor "Netgear" for product "Wnr3500l Firmware" and version " < 1.2.0.44" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wnr3500l Search vendor "Netgear" for product "Wnr3500l" | v2 Search vendor "Netgear" for product "Wnr3500l" and version "v2" | - |
Safe
|