Auth bypass in Netgear D6220
CVE-2017-18733
Certain NETGEAR devices are affected by authentication bypass. This affects D6220 before 1.0.0.28, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.8, R6400 before 1.0.1.22, R6400v2 before 1.0.2.32, R7100LG before 1.0.0.32, R7300DST before 1.0.0.52, R8300 before 1.0.2.94, and R8500 before 1.0.2.100.
Vulnerability class: Broken Authentication
EPSS: 0.006 (45.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2017-18733?
- CVE-2017-18733 is a high-severity vulnerability in Netgear D6220, classified under Improper Authentication. CVSS score: 8.8/10. Published 2020-04-23.
- How severe is CVE-2017-18733?
- High severity. CVSS v3 base score is 8.8 out of 10.