Threat Investigation
Request a demo

CVE-2017-18791

High

Description

Certain NETGEAR devices are affected by CSRF. This affects R6050/JR6150 before 1.0.1.7, PR2000 before 1.0.0.17, R6220 before 1.1.0.50, WNDR3700v5 before 1.1.0.48, JNR1010v2 before 1.1.0.40, JWNR2010v5 before 1.1.0.40, WNR1000v4 before 1.1.0.40, WNR2020 before 1.1.0.40, WNR2050 before 1.1.0.40, WNR614 before 1.1.0.40, WNR618 before 1.1.0.40, and D7000 before 1.0.1.50.

SeverityHigh
CVSS8.8
Exploit probability—
ProductNetgear R6050 Firmware
PublishedApr 21, 2020
First seenApr 21, 2020

How to fix

Update
  • netgear r6050_firmware1.0.1.7 or later
  • netgear jr6150_firmware1.0.1.7 or later
  • netgear pr2000_firmware1.0.0.17 or later
  • netgear r6220_firmware1.1.0.50 or later
  • netgear wndr3700_firmware1.1.0.48 or later
  • netgear jnr1010_firmware1.1.0.40 or later
  • netgear jwnr2010_firmware1.1.0.40 or later
  • netgear wnr1000_firmware1.1.0.40 or later
  • netgear wnr2020_firmware1.1.0.40 or later
  • netgear wnr2050_firmware1.1.0.40 or later
  • netgear wnr614_firmware1.1.0.40 or later
  • netgear wnr618_firmware1.1.0.40 or later

Affected products

ProductAffected versionsFixed in
netgear r6050_firmwarev < 1.0.1.71.0.1.7
netgear jr6150_firmwarev < 1.0.1.71.0.1.7
netgear pr2000_firmwarev < 1.0.0.171.0.0.17
netgear r6220_firmwarev < 1.1.0.501.1.0.50
netgear wndr3700_firmwarev < 1.1.0.481.1.0.48
netgear jnr1010_firmwarev < 1.1.0.401.1.0.40
netgear jwnr2010_firmwarev < 1.1.0.401.1.0.40
netgear wnr1000_firmwarev < 1.1.0.401.1.0.40
netgear wnr2020_firmwarev < 1.1.0.401.1.0.40
netgear wnr2050_firmwarev < 1.1.0.401.1.0.40
netgear wnr614_firmwarev < 1.1.0.401.1.0.40
netgear wnr618_firmwarev < 1.1.0.401.1.0.40
netgear d7000_firmwarev < 1.0.1.501.0.1.50

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.