VulnerabilityModified

CVE-2017-18867

Certain NETGEAR devices are affected by incorrect configuration of security settings.

MEDIUM 6.8EPSS 0.38%

Does this matter?

Lower severity and a low EPSS score (0.38%). Track it; it rarely justifies an emergency change on its own.

Description

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6100 before 1.0.0.55, D7800 before V1.0.1.24, R7100LG before V1.0.0.32, WNDR4300v1 before 1.0.2.90, and WNDR4500v3 before 1.0.0.48.

CVSS 3.1: 6.8 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.38% probability · 32th percentile
CISA KEV: Not listed
Weakness: CWE-20
Affected: netgear/d6100 firmware · netgear/d7800 firmware · netgear/r7100lg firmware · netgear/wndr4300 firmware · netgear/wndr4500 firmware
Source: cve@mitre.org

References

https://kb.netgear.com/000049554/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-and-Gateways-PSV-2017-2198Vendor Advisory
https://kb.netgear.com/000049554/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-and-Gateways-PSV-2017-2198Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.