First published: Fri Apr 24 2020(Updated: )
Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Netgear D6200 Firmware | <1.1.00.24 | |
Netgear D6200 | ||
Netgear R6700 Firmware | <1.1.0.42 | |
NETGEAR R6700 | =v2 | |
Netgear R6800 Firmware | <1.1.0.42 | |
Netgear R6800 | ||
Netgear R6900 Firmware | <1.1.0.42 | |
Netgear R6900 | =v2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-18720 is a vulnerability that allows for authentication bypass on certain NETGEAR devices.
CVE-2017-18720 affects the D6200, R6700v2, R6800, and R6900v2 devices.
CVE-2017-18720 has a severity rating of 8.8 (high).
To fix CVE-2017-18720, you need to upgrade the firmware of the affected NETGEAR devices to versions 1.1.00.24 or higher for D6200, and 1.1.0.42 or higher for R6700v2, R6800, and R6900v2.
You can find more information about CVE-2017-18720 in the Netgear security advisory located at https://kb.netgear.com/000052277/Security-Advisory-for-Authentication-Bypass-on-Routers-PSV-2017-2148