What is CVE-2017-18743?

CVE-2017-18743 is a high-severity vulnerability in Netgear R6300, classified under Improper Authentication. CVSS score: 8.8/10. Published 2020-04-23.

How severe is CVE-2017-18743?

High severity. CVSS v3 base score is 8.8 out of 10.

Auth bypass in Netgear R6300

CVE-2017-18743

Certain NETGEAR devices are affected by authentication bypass. This affects R6300v2 before 1.0.4.8, R6400 before 1.0.1.20, R6700 before 1.0.1.20, R6900 before 1.0.1.20, R7000 before 1.0.7.10, R7100LG before V1.0.0.32, R7300DST before 1.0.0…

Vulnerability class: Broken Authentication

EPSS: 0.006 (44.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Netgear R6300 — versions v2
Netgear R6300_firmware
Netgear R6400
Netgear R6400_firmware
Netgear R6700
Netgear R6700_firmware
Netgear R6900
Netgear R6900_firmware
Netgear R7000
Netgear R7000_firmware

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-18743?: CVE-2017-18743 is a high-severity vulnerability in Netgear R6300, classified under Improper Authentication. CVSS score: 8.8/10. Published 2020-04-23.
How severe is CVE-2017-18743?: High severity. CVSS v3 base score is 8.8 out of 10.