6.2

CVE-2017-18798

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, D7000 before 1.0.1.50, and D1500 before 1.0.0.25.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netgear ≫ R6700 Firmware Version < 1.1.0.38
   Netgear ≫ R6700 Version v2
Netgear ≫ R6800 Firmware Version < 1.1.0.38
   Netgear ≫ R6800 Version -
Netgear ≫ D7000 Firmware Version < 1.0.1.50
   Netgear ≫ D7000 Version -
Netgear ≫ D500 Firmware Version < 1.0.0.25
   Netgear ≫ D500 Version -
Netgear ≫ D1500 Firmware Version < 1.0.0.25
   Netgear ≫ D1500 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.37% 0.293
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.2 2.5 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:P/A:N
MITRE 8.4 2.5 5.9
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://kb.netgear.com/000049358/Security-Advisory-for-Security-Misconfiguration-Vulnerability-on-Some-Routers-and-Some-DSL-Modem-Routers-PSV-2017-2159
Vendor Advisory