What is CVE-2017-18749?

CVE-2017-18749 is a high-severity vulnerability in Netgear Jnr1010, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.8/10. Published 2020-04-23.

How severe is CVE-2017-18749?

High severity. CVSS v3 base score is 8.8 out of 10.

CSRF in Netgear Jnr1010

CVE-2017-18749

Certain NETGEAR devices are affected by CSRF. This affects JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.44, R6050 before 1.0.1.10, R6100 before 1.0.1.16, R6220 before 1.1.0.50, R7500 before 1.0.0.112, R7500v2…

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.005 (36.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Netgear Jnr1010 — versions v2
Netgear Jnr1010_firmware
Netgear Jr6150
Netgear Jr6150_firmware
Netgear Jwnr2010 — versions v5
Netgear Jwnr2010_firmware
Netgear R6050
Netgear R6050_firmware
Netgear R6100
Netgear R6100_firmware

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-18749?: CVE-2017-18749 is a high-severity vulnerability in Netgear Jnr1010, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.8/10. Published 2020-04-23.
How severe is CVE-2017-18749?: High severity. CVSS v3 base score is 8.8 out of 10.