Information disclosure in Netgear D7800
CVE-2017-18712
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D7800 before 1.0.1.28, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR4300v2 before 1.0.0.48, and WNDR4500v3 before 1.0.0.48.
Vulnerability class: Information Disclosure
EPSS: 0.005 (39.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2017-18712?
- CVE-2017-18712 is a medium-severity vulnerability in Netgear D7800, classified under Information Disclosure. CVSS score: 6.5/10. Published 2020-04-24.
- How severe is CVE-2017-18712?
- Medium severity. CVSS v3 base score is 6.5 out of 10.