CVE-2017-18773: Command Injection
First published: Wed Apr 22 2020(Updated: )
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6100 before V1.0.0.55, D7800 before V1.0.1.24, EX6150v2 before 1.0.0.48, R6100 before 1.0.1.14, R7500 before 1.0.0.110, R7500v2 before V1.0.3.16, R7800 before V1.0.2.36, WNDR4300v1 before 1.0.2.90, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR2000v5 before 1.0.0.48.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NETGEAR D6100 firmware | <1.0.0.55 | |
| NETGEAR D6100 firmware | ||
| NETGEAR D7800 | <1.0.1.24 | |
| NETGEAR D7800 Firmware | ||
| NETGEAR EX6150 | <1.0.0.48 | |
| NETGEAR EX6150v2 | =v2 | |
| NETGEAR R6100 firmware | <1.0.1.14 | |
| NETGEAR R6100 firmware | ||
| NETGEAR R7500v2 firmware | <1.0.0.110 | |
| NETGEAR R7500v2 firmware | ||
| NETGEAR R7500v2 firmware | <1.0.3.16 | |
| NETGEAR R7500v2 firmware | =v2 | |
| NETGEAR R7800 firmware | <1.0.2.36 | |
| NETGEAR R7800 firmware | ||
| NETGEAR WNDR4300v2 firmware | <1.0.2.90 | |
| NETGEAR wndr4300v2 | =v1 | |
| NETGEAR WNDR4300v2 firmware | <1.0.0.48 | |
| NETGEAR wndr4300v2 | =v2 | |
| NETGEAR WNDR4500 firmware | <1.0.0.48 | |
| NETGEAR WNDR4500v3 | =v3 | |
| NETGEAR WNR2000v2 | <1.0.0.48 | |
| Netgear WNR2000v4 | =v5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2017-18773?
CVE-2017-18773 has a high severity rating due to its potential for unauthorized command execution by authenticated users.
How do I fix CVE-2017-18773?
To fix CVE-2017-18773, update the firmware of affected NETGEAR devices to the latest version as listed in the vulnerability advisory.
Which NETGEAR devices are affected by CVE-2017-18773?
CVE-2017-18773 affects several NETGEAR devices, including D6100, D7800, EX6150v2, R6100, R7500, R7800, and WNDR4300.
Can CVE-2017-18773 be exploited remotely?
CVE-2017-18773 can only be exploited by authenticated users accessing the vulnerable NETGEAR devices.
What are the potential impacts of CVE-2017-18773?
The impacts of CVE-2017-18773 include unauthorized command execution which could lead to the modification or disclosure of sensitive information.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/references
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/netgear
- canonical/netgear d6100 firmware
- canonical/netgear d7800
- canonical/netgear d7800 firmware
- canonical/netgear ex6150
- canonical/netgear ex6150v2
- version/netgear ex6150v2/v2
- canonical/netgear r6100 firmware
- canonical/netgear r7500v2 firmware
- version/netgear r7500v2 firmware/v2
- canonical/netgear r7800 firmware
- canonical/netgear wndr4300v2 firmware
- canonical/netgear wndr4300v2
- version/netgear wndr4300v2/v1
- version/netgear wndr4300v2/v2
- canonical/netgear wndr4500 firmware
- canonical/netgear wndr4500v3
- version/netgear wndr4500v3/v3
- canonical/netgear wnr2000v2
- canonical/netgear wnr2000v4
- version/netgear wnr2000v4/v5