CVE-2017-18790: Infoleak
First published: Tue Apr 21 2020(Updated: )
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R6700 before 1.0.1.26, R7000 before 1.0.9.10, R7100LG before 1.0.0.32, R7900 before 1.0.1.18, R8000 before 1.0.3.54, and R8500 before 1.0.2.100.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Netgear R6700 Firmware | <1.0.1.26 | |
| NETGEAR R6700 | ||
| Netgear R7000 Firmware | <1.0.9.10 | |
| NETGEAR R7000 | ||
| Netgear R7100lg Firmware | <1.0.0.32 | |
| Netgear R7100LG | ||
| Netgear R7900 Firmware | <1.0.1.18 | |
| Netgear R7900 | ||
| Netgear R8000 Firmware | <1.0.3.54 | |
| NETGEAR R8000 | ||
| Netgear R8500 Firmware | <1.0.2.100 | |
| NETGEAR R8500 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
Which NETGEAR devices are affected by CVE-2017-18790?
R6700 before 1.0.1.26, R7000 before 1.0.9.10, R7100LG before 1.0.0.32, R7900 before 1.0.1.18, R8000 before 1.0.3.54, and R8500 before 1.0.2.100.
What is the severity score of CVE-2017-18790?
The severity score of CVE-2017-18790 is 6.2 (medium).
How can I fix CVE-2017-18790?
To fix CVE-2017-18790, update your NETGEAR device firmware to version 1.0.1.26 for R6700, 1.0.9.10 for R7000, 1.0.0.32 for R7100LG, 1.0.1.18 for R7900, 1.0.3.54 for R8000, and 1.0.2.100 for R8500.
What is the Common Weakness Enumeration (CWE) ID for CVE-2017-18790?
The CWE ID for CVE-2017-18790 is 200.
Where can I find more information about CVE-2017-18790?
You can find more information about CVE-2017-18790 in the Netgear security advisory at the following link: https://kb.netgear.com/000049372/Security-Advisory-for-Sensitive-Information-Disclosure-Vulnerability-on-Some-Routers-PSV-2017-0317
- collector/nvd-index
- agent/author
- agent/references
- agent/severity
- agent/weakness
- agent/description
- agent/type
- agent/event
- agent/last-modified-date
- agent/tags
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/netgear
- canonical/netgear r6700 firmware
- canonical/netgear r6700
- canonical/netgear r7000 firmware
- canonical/netgear r7000
- canonical/netgear r7100lg firmware
- canonical/netgear r7100lg
- canonical/netgear r7900 firmware
- canonical/netgear r7900
- canonical/netgear r8000 firmware
- canonical/netgear r8000
- canonical/netgear r8500 firmware
- canonical/netgear r8500