CVE-2017-18790 — Sensitive Information Exposure in Netgear R6700 Firmware

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
6.2MEDIUMNVD
EPSS
0.1%
top 66.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Netgear R6700 FirmwareNetgear R7000 FirmwareNetgear R7100lg Firmware+3 more
Timeline
PublishedApr 21
Latest updateMay 24

Description

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R6700 before 1.0.1.26, R7000 before 1.0.9.10, R7100LG before 1.0.0.32, R7900 before 1.0.1.18, R8000 before 1.0.3.54, and R8500 before 1.0.2.100.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 2.5 | Impact: 3.6

Affected Packages6 packages

▶NVDnetgear/r6700_firmware< 1.0.1.26
▶NVDnetgear/r7000_firmware< 1.0.9.10
▶NVDnetgear/r7900_firmware< 1.0.1.18
▶NVDnetgear/r8000_firmware< 1.0.3.54
▶NVDnetgear/r8500_firmware< 1.0.2.100

🔴Vulnerability Details

2
GHSA
GHSA-g48c-mxp7-x4g2: Certain NETGEAR devices are affected by disclosure of sensitive information↗2022-05-24
▶
CVEList
CVE-2017-18790: Certain NETGEAR devices are affected by disclosure of sensitive information↗2020-04-21
▶
CVE-2017-18790 — Sensitive Information Exposure | cvebase