vulnwire
8.8high

CVE-2017-18772

Certain NETGEAR devices are affected by authentication bypass.

Published 6 y ago · modified 4 mo ago · JSON

CVSS
8.8
v3.0 · CNA
CISA KEV
No
not known exploited
EPSS
0.6%
percentile 49%
Public exploits
0
none known

Certain NETGEAR devices are affected by authentication bypass. This affects EX3700 before 1.0.0.64, EX3800 before 1.0.0.64, EX6120 before 1.0.0.32, EX6130 before 1.0.0.16, R6300v2 before 1.0.4.12, R6700 before 1.0.1.26, R6900 before 1.0.1.22, R7000 before 1.0.9.6, R7300DST before 1.0.0.52, R7900 before 1.0.1.12, R8000 before 1.0.3.24, R8500 before 1.0.2.74, and WNR2000v2 before 1.2.0.8.

Exploit prediction (EPSS)

0.60% probability of exploitation in the next 30 days, higher than 49% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
CNA3.08.8CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:U/UI:N
NVD3.18.8CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CNA3.08.8CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD2.05.8AV:A/AC:L/Au:N/C:P/I:P/A:P

Classification

Weakness

References

  • kb.netgear.com /000051471/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-and-Extenders-PSV-2 · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.