CVE-2017-18852

published 2020-04-20

CVE-2017-18852: Certain NETGEAR devices are affected by CSRF and authentication bypass. This affects R7300DST before 1.0.0.54, R8300 before 1.0.2.100_1.0.82, R8500 before…

high 8.8 CVSS 3.1

AV N AC L PR N UI R S U C H I H A H

Certain NETGEAR devices are affected by CSRF and authentication bypass. This affects R7300DST before 1.0.0.54, R8300 before 1.0.2.100_1.0.82, R8500 before 1.0.2.100_1.0.82, and WNDR3400v3 before 1.0.1.14.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
netgear	r7300dst_firmware	< 1.0.0.54	1.0.0.54
netgear	r8300_firmware	< 1.0.2.100_1.0.82	1.0.2.100_1.0.82
netgear	r8500_firmware	< 1.0.2.100_1.0.82	1.0.2.100_1.0.82
netgear	wndr3400_firmware	< 1.0.1.14	1.0.1.14

CWE-352