1. Home
  2. CVE Database
  3. CVE-2017-18755
HIGH · 8.8

CVE-2017-18755

Certain NETGEAR devices are affected by CSRF. This affects R6300v2 before 1.0.4.8, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000P before 1.0.0.86, R6900P before 1.0.0.56...

Vulnerability Description

Certain NETGEAR devices are affected by CSRF. This affects R6300v2 before 1.0.4.8, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000P before 1.0.0.86, R6900P before 1.0.0.56, R7300 before 1.0.0.54, R8300 before 1.0.2.106, R8500 before 1.0.2.106, DGN2200v4 before 1.0.0.86, DGND2200Bv4 before 1.0.0.86, R6050 before 1.0.0.86, JR6150 before 1.0.1.10, R6220 before 1.1.0.50, and WNDR3700v5 before V1.1.0.48.

CVSS Score

8.8

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
NetgearR6300 Firmware< 1.0.4.8
NetgearR6300v2
NetgearR6400 Firmware< 1.0.2.32
NetgearR6400v2
NetgearR6700 Firmware< 1.0.1.22
NetgearR6700-
NetgearR6900 Firmware< 1.0.1.22
NetgearR6900-
NetgearR7000P Firmware< 1.0.0.86
NetgearR7000P-
NetgearR6900P Firmware< 1.0.0.56
NetgearR6900P-
NetgearR7300 Firmware< 1.0.0.54
NetgearR7300-
NetgearR8300 Firmware< 1.0.2.106
NetgearR8300-
NetgearR8500 Firmware< 1.0.2.106
NetgearR8500-
NetgearDgn2200 Firmware< 1.0.0.86
NetgearDgn2200v4

Related Weaknesses (CWE)

CWE-352

References

FAQ

What is CVE-2017-18755?

CVE-2017-18755 is a vulnerability with a CVSS score of 8.8 (HIGH). Certain NETGEAR devices are affected by CSRF. This affects R6300v2 before 1.0.4.8, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000P before 1.0.0.86, R6900P before 1.0.0.56...

How severe is CVE-2017-18755?

CVE-2017-18755 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-18755?

Check the references section above for vendor advisories and patch information. Affected products include: Netgear R6300 Firmware, Netgear R6300, Netgear R6400 Firmware, Netgear R6400, Netgear R6700 Firmware.