1. Home
  2. CVE Database
  3. CVE-2017-18791
HIGH · 8.8

CVE-2017-18791

Certain NETGEAR devices are affected by CSRF. This affects R6050/JR6150 before 1.0.1.7, PR2000 before 1.0.0.17, R6220 before 1.1.0.50, WNDR3700v5 before 1.1.0.48, JNR1010v2 before 1.1.0.40, JWNR2010v5...

Vulnerability Description

Certain NETGEAR devices are affected by CSRF. This affects R6050/JR6150 before 1.0.1.7, PR2000 before 1.0.0.17, R6220 before 1.1.0.50, WNDR3700v5 before 1.1.0.48, JNR1010v2 before 1.1.0.40, JWNR2010v5 before 1.1.0.40, WNR1000v4 before 1.1.0.40, WNR2020 before 1.1.0.40, WNR2050 before 1.1.0.40, WNR614 before 1.1.0.40, WNR618 before 1.1.0.40, and D7000 before 1.0.1.50.

CVSS Score

8.8

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
NetgearR6050 Firmware< 1.0.1.7
NetgearR6050-
NetgearJr6150 Firmware< 1.0.1.7
NetgearJr6150-
NetgearPr2000 Firmware< 1.0.0.17
NetgearPr2000-
NetgearR6220 Firmware< 1.1.0.50
NetgearR6220-
NetgearWndr3700 Firmware< 1.1.0.48
NetgearWndr3700v5
NetgearJnr1010 Firmware< 1.1.0.40
NetgearJnr1010v2
NetgearJwnr2010 Firmware< 1.1.0.40
NetgearJwnr2010v5
NetgearWnr1000 Firmware< 1.1.0.40
NetgearWnr1000v4
NetgearWnr2020 Firmware< 1.1.0.40
NetgearWnr2020-
NetgearWnr2050 Firmware< 1.1.0.40
NetgearWnr2050-

Related Weaknesses (CWE)

CWE-352

References

FAQ

What is CVE-2017-18791?

CVE-2017-18791 is a vulnerability with a CVSS score of 8.8 (HIGH). Certain NETGEAR devices are affected by CSRF. This affects R6050/JR6150 before 1.0.1.7, PR2000 before 1.0.0.17, R6220 before 1.1.0.50, WNDR3700v5 before 1.1.0.48, JNR1010v2 before 1.1.0.40, JWNR2010v5...

How severe is CVE-2017-18791?

CVE-2017-18791 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-18791?

Check the references section above for vendor advisories and patch information. Affected products include: Netgear R6050 Firmware, Netgear R6050, Netgear Jr6150 Firmware, Netgear Jr6150, Netgear Pr2000 Firmware.