{"id":"CVE-2017-18747","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-18747","generatedAt":"2026-10-28T20:11:26.249Z","title":"Certain NETGEAR devices are affected by incorrect configuration of security settings.","description":"Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects EX3700 before 1.0.0.64, EX3800 before 1.0.0.64, EX6000 before 1.0.0.24, EX6130 before 1.0.0.16, EX6400 before 1.0.1.60, EX7000 before 1.0.0.50, EX7300 before 1.0.1.60, and WN2500RPv2 before 1.0.1.46.","published":"2020-04-23T16:15:13.000Z","lastModified":"2026-06-17T01:13:29.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.1","score":6.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},"cwe":["CWE-20"],"affected":["netgear/ex3700 firmware","netgear/ex3800 firmware","netgear/ex6000 firmware","netgear/ex6130 firmware","netgear/ex6400 firmware","netgear/ex7000 firmware","netgear/ex7300 firmware","netgear/wn2500rp firmware"],"epss":{"score":0.00699,"percentile":0.52931,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.70%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://kb.netgear.com/000051507/Security-Advisory-for-Security-Misconfiguration-on-Some-Extenders-PSV-2016-0115","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"https://kb.netgear.com/000051507/Security-Advisory-for-Security-Misconfiguration-on-Some-Extenders-PSV-2016-0115","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-18747","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}