{"id":"CVE-2019-17372","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-17372","generatedAt":"2026-10-27T23:33:35.404Z","title":"Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi.","description":"Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi. The attacker can then, for example, visit MNU_accessPassword_recovered.html to obtain a valid new admin password. This affects AC1450, D8500, DC112A, JNDR3000, LG2200D, R4500, R6200, R6200V2, R6250, R6300, R6300v2, R6400, R6700, R6900P, R6900, R7000P, R7000, R7100LG, R7300, R7900, R8000, R8300, R8500, WGR614v10, WN2500RPv2, WNDR3400v2, WNDR3700v3, WNDR4000, WNDR4500, WNDR4500v2, WNR1000, WNR1000v3, WNR3500L, and WNR3500L.","published":"2019-10-09T13:15:17.000Z","lastModified":"2026-06-17T02:23:50.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.1","score":8.1,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-287"],"affected":["netgear/ac1450 firmware","netgear/d8500 firmware","netgear/dc112a firmware","netgear/jndr3000 firmware","netgear/lg2200d firmware","netgear/r4500 firmware","netgear/r6200 firmware","netgear/r6200v2 firmware","netgear/r6250 firmware","netgear/r6300 firmware","netgear/r6300v2 firmware","netgear/r6400 firmware","netgear/r6700 firmware","netgear/r6900p firmware","netgear/r6900 firmware","netgear/r7000p firmware","netgear/r7000 firmware","netgear/r7100lg firmware","netgear/r7300 firmware","netgear/r7900 firmware","netgear/r8000 firmware","netgear/r8300 firmware","netgear/r8500 firmware","netgear/wgr614v10 firmware","netgear/wn2500rpv2 firmware","netgear/wndr3400v2 firmware","netgear/wndr3700v3 firmware","netgear/wndr4000 firmware","netgear/wndr4500 firmware","netgear/wndr4500v2 firmware","netgear/wnr1000 firmware","netgear/wnr1000v3 firmware","netgear/wnr3500l firmware"],"epss":{"score":0.01659,"percentile":0.76485,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.66%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://github.com/zer0yu/CVE_Request/blob/master/netgear/netgear_cgi_unauthorized_access_vulnerability.md","tags":["Exploit","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://github.com/zer0yu/CVE_Request/blob/master/netgear/netgear_cgi_unauthorized_access_vulnerability.md","tags":["Exploit","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-17372","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}