CVE-2017-18703

Severity
8.8HIGH
EPSS
0.2%
top 62.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedApr 24
Latest updateMay 24

Description

Certain NETGEAR devices are affected by CSRF. This affects D1500 before 1.0.0.25, D500 before 1.0.0.25, D6100 before 1.0.0.55, D7000 before 1.0.1.50, D7800 before 1.0.1.28, EX6100v2 before 1.0.1.60, EX6150v2 before 1.0.1.60, JNR1010v2 before 1.1.0.46, JR6150 before 1.0.1.16, JWNR2010v5 before 1.1.0.46, PR2000 before 1.0.0.18, R6020 before 1.0.0.26, R6050 before 1.0.1.16, R6080 before 1.0.0.26, R6100 before 1.0.1.20, R6220 before 1.1.0.60, R7500 before 1.0.0.118, R7500v2 before 1.0.3.20, R7800 be

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages28 packages

NVDnetgear/d500_firmware< 1.0.0.25
NVDnetgear/d1500_firmware< 1.0.0.25
NVDnetgear/d6100_firmware< 1.0.0.55
NVDnetgear/d7000_firmware< 1.0.1.50
NVDnetgear/d7800_firmware< 1.0.1.28

🔴Vulnerability Details

2
GHSA
GHSA-fqqw-qmp7-4hh9: Certain NETGEAR devices are affected by CSRF2022-05-24
CVEList
CVE-2017-18703: Certain NETGEAR devices are affected by CSRF2020-04-24
CVE-2017-18703 (HIGH CVSS 8.8) | Certain NETGEAR devices are affecte | cvebase.io