CVE-2017-18852: CSRF
First published: Mon Apr 20 2020(Updated: )
Certain NETGEAR devices are affected by CSRF and authentication bypass. This affects R7300DST before 1.0.0.54, R8300 before 1.0.2.100_1.0.82, R8500 before 1.0.2.100_1.0.82, and WNDR3400v3 before 1.0.1.14.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Netgear R7300dst Firmware | <1.0.0.54 | |
| Netgear R7300dst | ||
| Netgear R8300 Firmware | <1.0.2.100_1.0.82 | |
| NETGEAR R8300 | ||
| Netgear R8500 Firmware | <1.0.2.100_1.0.82 | |
| NETGEAR R8500 | ||
| Netgear Wndr3400 Firmware | <1.0.1.14 | |
| NETGEAR Multiple Routers | =v3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
Which devices are affected by CVE-2017-18852?
Certain NETGEAR devices are affected by CSRF and authentication bypass, including R7300DST, R8300, R8500, and WNDR3400v3.
What is the severity rating for CVE-2017-18852?
The severity rating for CVE-2017-18852 is high (8.8).
How can I check if my NETGEAR device is vulnerable to CVE-2017-18852?
You can check the firmware version of your device against the affected versions listed in the advisory.
Are there any fixes available for CVE-2017-18852?
Yes, firmware updates are available to address the CSRF and authentication bypass vulnerability.
Where can I find more information about CVE-2017-18852?
You can find more information about CVE-2017-18852 in the security advisory provided by NETGEAR.
- collector/nvd-index
- agent/severity
- agent/author
- agent/weakness
- agent/references
- agent/description
- agent/type
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/netgear
- canonical/netgear r7300dst firmware
- canonical/netgear r7300dst
- canonical/netgear r8300 firmware
- canonical/netgear r8300
- canonical/netgear r8500 firmware
- canonical/netgear r8500
- canonical/netgear wndr3400 firmware
- canonical/netgear multiple routers
- version/netgear multiple routers/v3