CVE-2017-18848

published 2020-04-20

CVE-2017-18848: Certain NETGEAR devices are affected by CSRF. This affects R6300v2 before 1.0.0.36, AC1450 before 1.0.0.36, R7300 before 1.0.0.54, and R8500 before 1.0.2.94.

high 8.8 CVSS 3.1

AV N AC L PR N UI R S U C H I H A H

Certain NETGEAR devices are affected by CSRF. This affects R6300v2 before 1.0.0.36, AC1450 before 1.0.0.36, R7300 before 1.0.0.54, and R8500 before 1.0.2.94.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
netgear	ac1450_firmware	< 1.0.0.36	1.0.0.36
netgear	r6300_firmware	< 1.0.0.36	1.0.0.36
netgear	r7300_firmware	< 1.0.0.54	1.0.0.54
netgear	r8500_firmware	< 1.0.2.94	1.0.2.94

CWE-352