high8.8
CVE-2017-18842
Certain NETGEAR devices are affected by CSRF.
Impact
Certain NETGEAR devices are affected by CSRF. This affects R7300 before 1.0.0.54, R8500 before 1.0.2.94, DGN2200v1 before 1.0.0.55, and D2200D/D2200DW-1FRNAS before 1.0.0.32.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | R7300 Firmware | before 1.0.0.54 |
| Netgear | R8500 Firmware | before 1.0.2.94 |
| Netgear | Dgn2200 Firmware | before 1.0.0.55 |
| Netgear | D2200d Firmware | before 1.0.0.32 |
| Netgear | D2200dw-1frnas Firmware | before 1.0.0.32 |
Weakness classification
References
- NVD record
- CVE.org record
- https://kb.netgear.com/000049017/Security-Advisory-for-a-Cross-Site-Request-Forgery-on-Some-Routers-DSL-Gateways-and-a-Modem-Router-PSV-2017-0327
- https://kb.netgear.com/000049017/Security-Advisory-for-a-Cross-Site-Request-Forgery-on-Some-Routers-DSL-Gateways-and-a-Modem-Router-PSV-2017-0327