CVE-2017-18804: Command Injection
Published Apr 21, 2020
·Updated
Certain NETGEAR devices are affected by command injection. This affects R7800 before 1.0.2.16 and R9000 before 1.0.2.4.
Affected Software
4 affected components
Netgear R7800 firmware<1.0.2.16
Netgear R7800
Netgear R9000 Firmware<1.0.2.4
Netgear R9000
Event History
Apr 21, 2020
CVE Published
via MITRE·05:43 PM
Data Sourced
via MITRE·05:43 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2017-18804?
CVE-2017-18804 is classified as a command injection vulnerability affecting specific NETGEAR devices.
2
How do I fix CVE-2017-18804?
To fix CVE-2017-18804, update the firmware of the R7800 to at least version 1.0.2.16 or the R9000 to at least version 1.0.2.4.
3
Which NETGEAR devices are affected by CVE-2017-18804?
CVE-2017-18804 affects the NETGEAR R7800 before version 1.0.2.16 and the R9000 before version 1.0.2.4.
4
What is command injection in the context of CVE-2017-18804?
Command injection in CVE-2017-18804 refers to the ability of an attacker to execute arbitrary commands on affected NETGEAR routers.
5
Can I still use my NETGEAR R7800 or R9000 if CVE-2017-18804 is present?
It is not recommended to use the NETGEAR R7800 or R9000 if CVE-2017-18804 is present, as it poses a security risk.