CVE-2017-18768: Certain NETGEAR devices are affected by CSRF. This affects EX6100 before 1.0.2.16_1.1.130, EX6100v2 before 1.0.1.70, EX6150v2 before 1.0.1.54, EX6200v2 before…

PriorityP340high8.8CVSS 3.1

AVNACLPRNUIRSUCHIHAH

EPSS

0.62%

45.5th percentile

Certain NETGEAR devices are affected by CSRF. This affects EX6100 before 1.0.2.16_1.1.130, EX6100v2 before 1.0.1.70, EX6150v2 before 1.0.1.54, EX6200v2 before 1.0.1.50, EX6400 before 1.0.1.60, EX7300 before 1.0.1.60, and WN3000RPv3 before 1.0.2.44.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
netgear	ex6100_firmware	< 1.0.2.16_1.1.130	1.0.2.16_1.1.130
netgear	ex6100_firmware	< 1.0.1.70	1.0.1.70
netgear	ex6150_firmware	< 1.0.1.54	1.0.1.54
netgear	ex6200_firmware	< 1.0.1.50	1.0.1.50
netgear	ex6400_firmware	< 1.0.1.60	1.0.1.60
netgear	ex7300_firmware	< 1.0.1.60	1.0.1.60
netgear	wn3000rp_firmware	< 1.0.2.44	1.0.2.44

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.