What is CVE-2017-18755?

CVE-2017-18755 is a high-severity vulnerability in Netgear Dgn2200, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.8/10. Published 2020-04-22.

How severe is CVE-2017-18755?

High severity. CVSS v3 base score is 8.8 out of 10.

CSRF in Netgear Dgn2200

CVE-2017-18755

Certain NETGEAR devices are affected by CSRF. This affects R6300v2 before 1.0.4.8, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000P before 1.0.0.86, R6900P before 1.0.0.56, R7300 before 1.0.0.54, R8300 before 1…

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.005 (36.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Netgear Dgn2200 — versions v4
Netgear Dgn2200_firmware
Netgear Dgnd2200b — versions v4
Netgear Dgnd2200b_firmware
Netgear Jr6150
Netgear Jr6150_firmware
Netgear R6050
Netgear R6050_firmware
Netgear R6220
Netgear R6220_firmware

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-18755?: CVE-2017-18755 is a high-severity vulnerability in Netgear Dgn2200, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.8/10. Published 2020-04-22.
How severe is CVE-2017-18755?: High severity. CVSS v3 base score is 8.8 out of 10.