First published: Fri Apr 24 2020(Updated: )
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects R6020 before 1.0.0.30, R6080 before 1.0.0.30, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Netgear R6020 Firmware | <1.0.0.30 | |
NETGEAR R6020 | ||
Netgear R6700 Firmware | <1.1.0.42 | |
NETGEAR R6700 | =v2 | |
Netgear R6800 Firmware | <1.1.0.42 | |
Netgear R6800 | ||
Netgear R6900 Firmware | <1.1.0.42 | |
Netgear R6900 | =v2 | |
Netgear R6080 Firmware | <1.0.0.30 | |
Netgear R6080 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-18726 is a vulnerability that affects certain NETGEAR devices and allows an unauthenticated attacker to perform a stack-based buffer overflow.
CVE-2017-18726 affects the following NETGEAR devices: R6020 before 1.0.0.30, R6080 before 1.0.0.30, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.
CVE-2017-18726 has a severity rating of 8.8, which is considered high.
CVE-2017-18726 allows an unauthenticated attacker to exploit a stack-based buffer overflow on the affected NETGEAR devices, potentially leading to arbitrary code execution.
To fix CVE-2017-18726, it is recommended to update the firmware of the affected NETGEAR devices to versions 1.0.0.30 (for R6020 and R6080) or 1.1.0.42 (for R6700v2, R6800, and R6900v2).