CVE-2017-18847: Infoleak
Published Apr 20, 2020
·Updated
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects R6400v2 before 1.0.2.32, R7000P/R6900P before 1.0.0.56, R7900 before 1.0.1.18, R8300 before 1.0.2.1001.0.82, R8500 before 1.0.2.1001.0.82, and D8500 before 1.0.3.29.
Affected Software
14 affected components
Netgear R6400 Firmware<1.0.2.32
Netgear R6400=v2
Netgear R7000p Firmware<1.0.0.56
Netgear R7000P
Netgear R6900p Firmware<1.0.0.56
Netgear R6900P
Netgear R7900 Firmware<1.0.1.18
Netgear R7900
Netgear R8300 Firmware<1.0.2.100_1.0.82
Netgear R8300
Netgear R8500 Firmware<1.0.2.100_1.0.82
Netgear R8500
Netgear D8500 Firmware<1.0.3.29
Netgear D8500
Event History
Apr 20, 2020
CVE Published
via MITRE·03:32 PM
Data Sourced
via MITRE·03:32 PM
DescriptionSeverity
Frequently Asked Questions
1
Which NETGEAR devices are affected by CVE-2017-18847?
The affected NETGEAR devices include R6400v2, R7000P, R6900P, R7900, R8300, R8500, and D8500.
2
What is the severity of CVE-2017-18847?
The severity of CVE-2017-18847 is medium with a CVSS score of 5.5.
3
How can an attacker exploit CVE-2017-18847?
An attacker can exploit CVE-2017-18847 by reading arbitrary files on the affected NETGEAR devices.
4
How do I check if my NETGEAR device is vulnerable to CVE-2017-18847?
You can check the firmware version of your NETGEAR device to determine if it is vulnerable.
5
How can I fix CVE-2017-18847?
To fix CVE-2017-18847, update your NETGEAR device firmware to the latest patched version provided by NETGEAR.