First published: Fri Apr 24 2020(Updated: )
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24. R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Netgear D6200 Firmware | <1.1.00.24 | |
Netgear D6200 | ||
Netgear R6700 Firmware | <1.1.0.42 | |
NETGEAR R6700 | =v2 | |
Netgear R6800 Firmware | <1.1.0.42 | |
Netgear R6800 | ||
Netgear R6900 Firmware | <1.1.0.42 | |
Netgear R6900 | =v2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2017-18725 is high.
NETGEAR devices D6200, R6700v2, R6800, and R6900v2 are affected by CVE-2017-18725.
An unauthenticated attacker can exploit CVE-2017-18725 by performing a stack-based buffer overflow attack.
The recommended firmware version to fix CVE-2017-18725 is 1.1.00.24 for D6200 and 1.1.0.42 for R6700v2, R6800, and R6900v2.
You can find more information about CVE-2017-18725 at the following link: [https://kb.netgear.com/000051530/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers-and-Gateways-PSV-2017-2141](https://kb.netgear.com/000051530/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers-and-Gateways-PSV-2017-2141).