CVE-2017-18729: Buffer Overflow
First published: Fri Apr 24 2020(Updated: )
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6020 before 1.0.0.30, R6080 before 1.0.0.30, R6120 before 1.0.0.36, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Netgear D6200 Firmware | <1.1.00.24 | |
| Netgear D6200 | ||
| Netgear R6020 Firmware | <1.0.0.30 | |
| NETGEAR R6020 | ||
| Netgear R6080 Firmware | <1.0.0.30 | |
| Netgear R6080 | ||
| Netgear R6120 Firmware | <1.0.0.36 | |
| NETGEAR R6120 | ||
| Netgear R6700 Firmware | <1.1.0.42 | |
| NETGEAR R6700 | =v2 | |
| Netgear R6800 Firmware | <1.1.0.42 | |
| Netgear R6800 | ||
| Netgear R6900 Firmware | <1.1.0.42 | |
| Netgear R6900 | =v2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2017-18729?
CVE-2017-18729 is a vulnerability that affects certain NETGEAR devices and allows an unauthenticated attacker to perform a stack-based buffer overflow.
Which NETGEAR devices are affected by CVE-2017-18729?
CVE-2017-18729 affects D6200 before 1.1.00.24, R6020 before 1.0.0.30, R6080 before 1.0.0.30, R6120 before 1.0.0.36, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.
What is the severity of CVE-2017-18729?
CVE-2017-18729 has a severity rating of 8.8, which is classified as high.
How can an attacker exploit CVE-2017-18729?
An attacker can exploit CVE-2017-18729 by sending a specially crafted request to the affected NETGEAR device, causing a stack-based buffer overflow and potentially executing arbitrary code.
How can I fix CVE-2017-18729?
To fix CVE-2017-18729, update the firmware of the affected NETGEAR device to a version that is not vulnerable.
- collector/nvd-index
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/author
- agent/tags
- agent/description
- agent/references
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- vendor/netgear
- canonical/netgear d6200 firmware
- canonical/netgear d6200
- canonical/netgear r6020 firmware
- canonical/netgear r6020
- canonical/netgear r6080 firmware
- canonical/netgear r6080
- canonical/netgear r6120 firmware
- canonical/netgear r6120
- canonical/netgear r6700 firmware
- canonical/netgear r6700
- version/netgear r6700/v2
- canonical/netgear r6800 firmware
- canonical/netgear r6800
- canonical/netgear r6900 firmware
- canonical/netgear r6900
- version/netgear r6900/v2