Vulnerability Details : CVE-2017-18752
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects EX3700 before 1.0.0.64, EX3800 before 1.0.0.64, EX6120 before 1.0.0.32, EX6130 before 1.0.0.16, R6300v2 before 1.0.4.12, R6700 before 1.0.1.26, R6900 before 1.0.1.22, R7000 before 1.0.9.6, R7300DST before 1.0.0.52, R7900 before 1.0.1.12, R8000 before 1.0.3.24, and R8500 before 1.0.2.94.
Vulnerability category: Information leak
Products affected by CVE-2017-18752
- cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:r7300dst_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:ex3700_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:ex3800_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:ex6120_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:ex6130_firmware:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2017-18752
0.03%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 5 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2017-18752
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
3.3
|
LOW | AV:A/AC:L/Au:N/C:P/I:N/A:N |
6.5
|
2.9
|
NIST | |
8.8
|
HIGH | CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
MITRE | |
6.5
|
MEDIUM | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
2.8
|
3.6
|
NIST |
CWE ids for CVE-2017-18752
-
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.Assigned by: nvd@nist.gov (Primary)
References for CVE-2017-18752
-
https://kb.netgear.com/000051502/Security-Advisory-for-Arbitrary-File-Read-on-Some-Routers-and-Extenders-PSV-2017-0319
Security Advisory for Arbitrary File Read on Some Routers and Extenders, PSV-2017-0319 | Answer | NETGEAR SupportVendor Advisory
Jump to