Threat Investigation
Request a demo

CVE-2017-18852

High

Description

Certain NETGEAR devices are affected by CSRF and authentication bypass. This affects R7300DST before 1.0.0.54, R8300 before 1.0.2.100_1.0.82, R8500 before 1.0.2.100_1.0.82, and WNDR3400v3 before 1.0.1.14.

SeverityHigh
CVSS8.8
Exploit probability—
ProductNetgear R7300dst Firmware
PublishedApr 20, 2020
First seenApr 20, 2020

How to fix

Update
  • netgear r7300dst_firmware1.0.0.54 or later
  • netgear r8300_firmware1.0.2.100_1.0.82 or later
  • netgear r8500_firmware1.0.2.100_1.0.82 or later
  • netgear wndr3400_firmware1.0.1.14 or later

Affected products

ProductAffected versionsFixed in
netgear r7300dst_firmwarev < 1.0.0.541.0.0.54
netgear r8300_firmwarev < 1.0.2.100_1.0.821.0.2.100_1.0.82
netgear r8500_firmwarev < 1.0.2.100_1.0.821.0.2.100_1.0.82
netgear wndr3400_firmwarev < 1.0.1.141.0.1.14

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.