medium6.5
CVE-2017-18853
Certain NETGEAR devices are affected by password recovery and file access.
Impact
Certain NETGEAR devices are affected by password recovery and file access. This affects D8500 1.0.3.27 and earlier, DGN2200v4 1.0.0.82 and earlier, R6300v2 1.0.4.06 and earlier, R6400 1.0.1.20 and earlier, R6400v2 1.0.2.18 and earlier, R6700 1.0.1.22 and earlier, R6900 1.0.1.20 and earlier, R7000 1.0.7.10 and earlier, R7000P 1.0.0.58 and earlier, R7100LG 1.0.0.28 and earlier, R7300DST 1.0.0.52 and earlier, R7900 1.0.1.12 and earlier, R8000 1.0.3.46 and earlier, R8300 1.0.2.86 and earlier, R8500 1.0.2.86 and earlier, WNDR3400v3 1.0.1.8 and earlier, and WNDR4500v2 1.0.0.62 and earlier.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | D8500 Firmware | through 1.0.3.27 |
| Netgear | Dgn2200 Firmware | through 1.0.0.82 |
| Netgear | R6300 Firmware | through 1.0.4.06 |
| Netgear | R6400 Firmware | through 1.0.1.20 through 1.0.2.18 |
| Netgear | R6700 Firmware | through 1.0.1.22 |
| Netgear | R6900 Firmware | through 1.0.1.20 |
| Netgear | R7000 Firmware | through 1.0.7.10 |
| Netgear | R7000p Firmware | through 1.0.0.58 |
| Netgear | R7100lg Firmware | through 1.0.0.28 |
| Netgear | R7300dst Firmware | through 1.0.0.52 |
| Netgear | R7900 Firmware | through 1.0.1.12 |
| Netgear | R8000 Firmware | through 1.0.3.46 |