1. Home
  2. CVE Database
  3. CVE-2017-18794
HIGH · 8.4

CVE-2017-18794

Certain NETGEAR devices are affected by command injection. This affects R6300v2 before 1.0.4.8_10.0.77, R6400 before 1.0.1.24, R6700 before 1.0.1.26, R7000 before 1.0.9.10, R7100LG before 1.0.0.32, R7...

Vulnerability Description

Certain NETGEAR devices are affected by command injection. This affects R6300v2 before 1.0.4.8_10.0.77, R6400 before 1.0.1.24, R6700 before 1.0.1.26, R7000 before 1.0.9.10, R7100LG before 1.0.0.32, R7900 before 1.0.1.18, R8000 before 1.0.3.54, R8500 before 1.0.2.100, and D6100 before 1.0.0.50_0.0.50.

CVSS Score

8.4

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
NetgearR6300 Firmware< 1.0.4.8_10.0.77
NetgearR6300v2
NetgearR6400 Firmware< 1.0.1.24
NetgearR6400-
NetgearR6700 Firmware< 1.0.1.26
NetgearR6700-
NetgearR7000 Firmware< 1.0.9.10
NetgearR7000-
NetgearR7100Lg Firmware< 1.0.0.32
NetgearR7100Lg-
NetgearR7900 Firmware< 1.0.1.18
NetgearR7900-
NetgearR8000 Firmware< 1.0.3.54
NetgearR8000-
NetgearR8500 Firmware< 1.0.2.100
NetgearR8500-
NetgearD6100 Firmware< 1.0.0.50_0.0.50
NetgearD6100-

Related Weaknesses (CWE)

CWE-74

References

FAQ

What is CVE-2017-18794?

CVE-2017-18794 is a vulnerability with a CVSS score of 8.4 (HIGH). Certain NETGEAR devices are affected by command injection. This affects R6300v2 before 1.0.4.8_10.0.77, R6400 before 1.0.1.24, R6700 before 1.0.1.26, R7000 before 1.0.9.10, R7100LG before 1.0.0.32, R7...

How severe is CVE-2017-18794?

CVE-2017-18794 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-18794?

Check the references section above for vendor advisories and patch information. Affected products include: Netgear R6300 Firmware, Netgear R6300, Netgear R6400 Firmware, Netgear R6400, Netgear R6700 Firmware.