CVE-2017-18801: Command Injection
Published Apr 21, 2020
·Updated
Certain NETGEAR devices are affected by command injection. This affects R6220 before 1.1.0.50, R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, WNDR3700v5 before 1.1.0.48, and D7000 before 1.0.1.50.
Affected Software
10 affected components
Netgear R6220 Firmware<1.1.0.50
Netgear R6220
Netgear R6700 firmware<1.1.0.38
Netgear R6700=v2
Netgear R6800 Firmware<1.1.0.38
Netgear R6800
Netgear Wndr3700 Firmware<1.1.0.48
Netgear WNDR3700=v5
Netgear D7000 Firmware<1.0.1.50
Netgear D7000
Event History
Apr 21, 2020
CVE Published
via MITRE·06:28 PM
Data Sourced
via MITRE·06:28 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2017-18801?
CVE-2017-18801 is classified as a command injection vulnerability affecting specific NETGEAR devices.
2
How do I fix CVE-2017-18801?
To resolve CVE-2017-18801, update the affected NETGEAR devices to their latest firmware versions.
3
Which NETGEAR devices are affected by CVE-2017-18801?
CVE-2017-18801 impacts NETGEAR R6220, R6700v2, R6800, WNDR3700v5, and D7000 running below specific firmware versions.
4
What happens if I do not address CVE-2017-18801?
Failing to address CVE-2017-18801 may expose affected NETGEAR devices to potential command injection attacks.
5
Is CVE-2017-18801 remotely exploitable?
Yes, CVE-2017-18801 can be exploited remotely, allowing attackers to execute arbitrary commands on the affected devices.