CVE-2017-18768

published 2020-04-22

CVE-2017-18768: Certain NETGEAR devices are affected by CSRF. This affects EX6100 before 1.0.2.16_1.1.130, EX6100v2 before 1.0.1.70, EX6150v2 before 1.0.1.54, EX6200v2 before…

high 8.8 CVSS 3.1

AV N AC L PR N UI R S U C H I H A H

Certain NETGEAR devices are affected by CSRF. This affects EX6100 before 1.0.2.16_1.1.130, EX6100v2 before 1.0.1.70, EX6150v2 before 1.0.1.54, EX6200v2 before 1.0.1.50, EX6400 before 1.0.1.60, EX7300 before 1.0.1.60, and WN3000RPv3 before 1.0.2.44.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
netgear	ex6100_firmware	< 1.0.2.16_1.1.130	1.0.2.16_1.1.130
netgear	ex6100_firmware	< 1.0.1.70	1.0.1.70
netgear	ex6150_firmware	< 1.0.1.54	1.0.1.54
netgear	ex6200_firmware	< 1.0.1.50	1.0.1.50
netgear	ex6400_firmware	< 1.0.1.60	1.0.1.60
netgear	ex7300_firmware	< 1.0.1.60	1.0.1.60
netgear	wn3000rp_firmware	< 1.0.2.44	1.0.2.44

CWE-352