CVE-2017-18867: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6100 before 1.0.0.55, D7800 before V1.0.1.24, R7100LG…

PriorityP425medium6.8CVSS 3.1

AVPACLPRNUINSUCHIHAH

EPSS

0.38%

30.6th percentile

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6100 before 1.0.0.55, D7800 before V1.0.1.24, R7100LG before V1.0.0.32, WNDR4300v1 before 1.0.2.90, and WNDR4500v3 before 1.0.0.48.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
netgear	d6100_firmware	< 1.0.0.55	1.0.0.55
netgear	d7800_firmware	< 1.0.1.24	1.0.1.24
netgear	r7100lg_firmware	< 1.0.0.32	1.0.0.32
netgear	wndr4300_firmware	< 1.0.2.90	1.0.2.90
netgear	wndr4500_firmware	< 1.0.0.48	1.0.0.48

CVSS provenance

nvdv3.16.8MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvdv3.06.8MEDIUMCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.