CVE-2017-18755

CWE-352 — Cross-Site Request Forgery (CSRF)3 documents3 sources
Severity
8.8HIGH
EPSS
0.2%
top 56.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
15
Netgear Dgn2200 FirmwareNetgear Dgnd2200b FirmwareNetgear Jr6150 Firmware+12 more
Timeline
PublishedApr 22
Latest updateMay 24

Description

Certain NETGEAR devices are affected by CSRF. This affects R6300v2 before 1.0.4.8, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000P before 1.0.0.86, R6900P before 1.0.0.56, R7300 before 1.0.0.54, R8300 before 1.0.2.106, R8500 before 1.0.2.106, DGN2200v4 before 1.0.0.86, DGND2200Bv4 before 1.0.0.86, R6050 before 1.0.0.86, JR6150 before 1.0.1.10, R6220 before 1.1.0.50, and WNDR3700v5 before V1.1.0.48.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages15 packages

▶NVDnetgear/r6900p_firmware< 1.0.0.56
▶NVDnetgear/r6050_firmware< 1.0.0.86
▶NVDnetgear/r6220_firmware< 1.1.0.50
▶NVDnetgear/r6700_firmware< 1.0.1.22
▶NVDnetgear/r6900_firmware< 1.0.1.22

🔴Vulnerability Details

2
GHSA
GHSA-ff2h-w98c-mqf9: Certain NETGEAR devices are affected by CSRF↗2022-05-24
▶
CVEList
CVE-2017-18755: Certain NETGEAR devices are affected by CSRF↗2020-04-22
▶
CVE-2017-18755 (HIGH CVSS 8.8) | Certain NETGEAR devices are affecte | cvebase.io