CVE-2017-18852: CSRF
Published Apr 20, 2020
·Updated
Certain NETGEAR devices are affected by CSRF and authentication bypass. This affects R7300DST before 1.0.0.54, R8300 before 1.0.2.1001.0.82, R8500 before 1.0.2.1001.0.82, and WNDR3400v3 before 1.0.1.14.
Affected Software
8 affected components
Netgear R7300dst Firmware<1.0.0.54
Netgear R7300DST
Netgear R8300 Firmware<1.0.2.100_1.0.82
Netgear R8300
Netgear R8500 Firmware<1.0.2.100_1.0.82
Netgear R8500
Netgear Wndr3400 Firmware<1.0.1.14
Netgear WNDR3400=v3
Event History
Apr 20, 2020
CVE Published
via MITRE·12:42 PM
Data Sourced
via MITRE·12:42 PM
DescriptionSeverity
Frequently Asked Questions
1
Which devices are affected by CVE-2017-18852?
Certain NETGEAR devices are affected by CSRF and authentication bypass, including R7300DST, R8300, R8500, and WNDR3400v3.
2
What is the severity rating for CVE-2017-18852?
The severity rating for CVE-2017-18852 is high (8.8).
3
How can I check if my NETGEAR device is vulnerable to CVE-2017-18852?
You can check the firmware version of your device against the affected versions listed in the advisory.
4
Are there any fixes available for CVE-2017-18852?
Yes, firmware updates are available to address the CSRF and authentication bypass vulnerability.
5
Where can I find more information about CVE-2017-18852?
You can find more information about CVE-2017-18852 in the security advisory provided by NETGEAR.