CVE-2017-18802: Command Injection
Published Apr 21, 2020
·Updated
Certain NETGEAR devices are affected by command injection. This affects R6100 before 1.0.1.14, R7500 before 1.0.0.110, R7500v2 before 1.0.3.16, R7800 before 1.0.2.32, EX6200v2 before 1.0.1.50, and D7800 before 1.0.1.22.
Affected Software
12 affected components
Netgear R6100 Firmware<1.0.1.14
Netgear R6100
Netgear R7500 Firmware<1.0.0.110
Netgear R7500
Netgear R7500 Firmware<1.0.3.16
Netgear R7500=v2
Netgear R7800 firmware<1.0.2.32
Netgear R7800
Netgear Ex6200 Firmware<1.0.1.50
Netgear EX6200=v2
Netgear D7800 Firmware<1.0.1.22
Netgear D7800
Event History
Apr 21, 2020
CVE Published
via MITRE·05:56 PM
Data Sourced
via MITRE·05:56 PM
DescriptionSeverity
Frequently Asked Questions
1
Which NETGEAR devices are affected by CVE-2017-18802?
NETGEAR devices R6100, R7500, R7500v2, R7800, EX6200v2, and D7800 are affected by CVE-2017-18802.
2
What is the severity of CVE-2017-18802?
CVE-2017-18802 has a severity value of 6.7 (medium).
3
How can I fix CVE-2017-18802?
To fix CVE-2017-18802, update your NETGEAR device's firmware to the latest version provided by the manufacturer.
4
Where can I find more information about CVE-2017-18802?
You can find more information about CVE-2017-18802 in the NETGEAR security advisory at the following link: [link](https://kb.netgear.com/000049354/Security-Advisory-for-Command-Injection-Vulnerability-on-D7000-EX6200v2-and-Some-Routers-PSV-2017-2181).