Threat Investigation
Request a demo

CVE-2017-18756

High

Description

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6220 before 1.0.0.32, D6400 before 1.0.0.66, D8500 before 1.0.3.35, DGN2200Bv4 before 1.0.0.94, DGN2200v4 before 1.0.0.94, R6250 before 1.0.4.14, R6300v2 before 1.0.4.18, R6400 before 1.01.32, R6400v2 before 1.0.2.44, R6700 before 1.0.1.36, R6900 before 1.0.1.30, R6900P before 1.3.0.8, R7000 before 1.0.9.14, R7000P before 1.3.0.8, R7100LG before 1.0.0.34, R7900 before 1.0.2.4, R8000 before 1.0.4.2, WN2500RPv2 before 1.0.1.50, WNDR3400v3 before 1.0.1.14, and WNDR4000 before 1.0.2.10.

SeverityHigh
CVSS8.8
Exploit probability—
ProductNetgear D6220 Firmware
PublishedApr 22, 2020
First seenApr 22, 2020

How to fix

Update
  • netgear d6220_firmware1.0.0.32 or later
  • netgear d6400_firmware1.0.0.66 or later
  • netgear d8500_firmware1.0.3.35 or later
  • netgear dgn2200b_firmware1.0.0.94 or later
  • netgear dgn2200_firmware1.0.0.94 or later
  • netgear r6250_firmware1.0.4.14 or later
  • netgear r6300_firmware1.0.4.18 or later
  • netgear r6400_firmware1.01.32, 1.0.2.44 or later
  • netgear r6700_firmware1.0.1.36 or later
  • netgear r6900_firmware1.0.1.30 or later
  • netgear r6900p_firmware1.3.0.8 or later
  • netgear r7000_firmware1.0.9.14 or later

Affected products

ProductAffected versionsFixed in
netgear d6220_firmwarev < 1.0.0.321.0.0.32
netgear d6400_firmwarev < 1.0.0.661.0.0.66
netgear d8500_firmwarev < 1.0.3.351.0.3.35
netgear dgn2200b_firmwarev < 1.0.0.941.0.0.94
netgear dgn2200_firmwarev < 1.0.0.941.0.0.94
netgear r6250_firmwarev < 1.0.4.141.0.4.14
netgear r6300_firmwarev < 1.0.4.181.0.4.18
netgear r6400_firmwarev < 1.01.32, v < 1.0.2.441.01.32, 1.0.2.44
netgear r6700_firmwarev < 1.0.1.361.0.1.36
netgear r6900_firmwarev < 1.0.1.301.0.1.30
netgear r6900p_firmwarev < 1.3.0.81.3.0.8
netgear r7000_firmwarev < 1.0.9.141.0.9.14
netgear r7000p_firmwarev < 1.3.0.81.3.0.8
netgear r7100lg_firmwarev < 1.0.0.341.0.0.34
netgear r7900_firmwarev < 1.0.2.41.0.2.4
netgear r8000_firmwarev < 1.0.4.21.0.4.2
netgear wn2500rp_firmwarev < 1.0.1.501.0.1.50
netgear wndr3400_firmwarev < 1.0.1.141.0.1.14
netgear wndr4000_firmwarev < 1.0.2.101.0.2.10

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.