CVE-2017-18794 : Certain NETGEAR devices are affected by command injection. This affects R6300v2

Certain NETGEAR devices are affected by command injection. This affects R6300v2 before 1.0.4.8_10.0.77, R6400 before 1.0.1.24, R6700 before 1.0.1.26, R7000 before 1.0.9.10, R7100LG before 1.0.0.32, R7900 before 1.0.1.18, R8000 before 1.0.3.54, R8500 before 1.0.2.100, and D6100 before 1.0.0.50_0.0.50.

Published 2020-04-21 19:15:12

Updated 2020-04-24 14:51:53

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2017-18794

Netgear » R6400 Firmware
Versions before (<) 1.0.1.24
cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6400 » Version: N/A
Netgear » R6700 Firmware
Versions before (<) 1.0.1.26
cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6700 » Version: N/A
Netgear » R7000 Firmware
Versions before (<) 1.0.9.10
cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R7000 » Version: N/A
Netgear » R7100lg Firmware
Versions before (<) 1.0.0.32
cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R7100lg » Version: N/A
Netgear » R7900 Firmware
Versions before (<) 1.0.1.18
cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R7900 » Version: N/A
Netgear » R8000 Firmware
Versions before (<) 1.0.3.54
cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R8000 » Version: N/A
Netgear » R6300 Firmware
Versions before (<) 1.0.4.8_10.0.77
cpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6300 » Version: V2
Netgear » D6100 Firmware
Versions before (<) 1.0.0.50_0.0.50
cpe:2.3:o:netgear:d6100_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » D6100 » Version: N/A
Netgear » R8500 Firmware
Versions before (<) 1.0.2.100
cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R8500 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2017-18794

EPSS FAQ

0.08%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 32 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-18794

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
8.4	HIGH	CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	2.5	5.9	MITRE
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
8.4	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	2.5	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2017-18794

CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2017-18794

https://kb.netgear.com/000049368/Security-Advisory-for-Command-Injection-Vulnerability-on-D6100-and-Some-Routers-PSV-2017-0321

Security Advisory for Command Injection Vulnerability on D6100 and Some Routers, PSV-2017-0321 | Answer | NETGEAR Support
Vendor Advisory

Jump to

Vulnerability Details : CVE-2017-18794

Products affected by CVE-2017-18794

Exploit prediction scoring system (EPSS) score for CVE-2017-18794

CVSS scores for CVE-2017-18794

CWE ids for CVE-2017-18794

References for CVE-2017-18794