CVE-2017-18744

CWE-120 — Classic Buffer Overflow3 documents3 sources
Severity
8.8HIGH
EPSS
0.1%
top 65.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Netgear R6250 FirmwareNetgear R6300 FirmwareNetgear R6700 Firmware+5 more
Timeline
PublishedApr 23
Latest updateMay 24

Description

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6250 before 1.0.4.12, R6300v2 before 1.0.4.12, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.4, R7900 before 1.0.1.12, R8000 before 1.0.3.24, and R8500 before 1.0.2.74.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages8 packages

▶NVDnetgear/r6250_firmware< 1.0.4.12
▶NVDnetgear/r6700_firmware< 1.0.1.22
▶NVDnetgear/r6900_firmware< 1.0.1.22
▶NVDnetgear/r7000_firmware< 1.0.9.4
▶NVDnetgear/r7900_firmware< 1.0.1.12

🔴Vulnerability Details

2
GHSA
GHSA-325f-8g4v-g98x: Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker↗2022-05-24
▶
CVEList
CVE-2017-18744: Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker↗2020-04-23
▶
CVE-2017-18744 (HIGH CVSS 8.8) | Certain NETGEAR devices are affecte | cvebase.io