First published: Fri Apr 24 2020(Updated: )
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Netgear D6200 Firmware | <1.1.00.24 | |
Netgear D6200 | ||
Netgear R6700 Firmware | <1.1.0.42 | |
NETGEAR R6700 | =v2 | |
Netgear R6800 Firmware | <1.1.0.42 | |
Netgear R6800 | ||
Netgear R6900 Firmware | <1.1.0.42 | |
Netgear R6900 | =v2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2017-18717.
The devices affected by this vulnerability are D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.
The severity of CVE-2017-18717 is high with a severity value of 8.8.
To fix CVE-2017-18717, update the firmware of the affected NETGEAR devices to version 1.1.00.24 for D6200 and 1.1.0.42 for R6700v2, R6800, and R6900v2.
You can find more information about CVE-2017-18717 in the Netgear security advisory at the following link: https://kb.netgear.com/000052280/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Routers-PSV-2017-2153.