Vulnerability Description
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects R6400 before 1.0.1.24, R7900 before 1.0.1.18, R8000 before 1.0.3.54, and R8500 before 1.0.2.100.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netgear | R6400 Firmware | < 1.0.1.24 |
| Netgear | R6400 | - |
| Netgear | R7900 Firmware | < 1.0.1.18 |
| Netgear | R7900 | - |
| Netgear | R8000 Firmware | < 1.0.3.54 |
| Netgear | R8000 | - |
| Netgear | R8500 Firmware | < 1.0.2.100 |
| Netgear | R8500 | - |
Related Weaknesses (CWE)
References
- https://kb.netgear.com/000049365/Security-Advisory-for-Arbitrary-File-Read-VulneVendor Advisory
- https://kb.netgear.com/000049365/Security-Advisory-for-Arbitrary-File-Read-VulneVendor Advisory
FAQ
What is CVE-2017-18797?
CVE-2017-18797 is a vulnerability with a CVSS score of 6.2 (MEDIUM). Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects R6400 before 1.0.1.24, R7900 before 1.0.1.18, R8000 before 1.0.3.54, and R8500 before 1.0.2.100.
How severe is CVE-2017-18797?
CVE-2017-18797 has been rated MEDIUM with a CVSS base score of 6.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-18797?
Check the references section above for vendor advisories and patch information. Affected products include: Netgear R6400 Firmware, Netgear R6400, Netgear R7900 Firmware, Netgear R7900, Netgear R8000 Firmware.