What is CVE-2017-18772?

CVE-2017-18772 is a high-severity vulnerability in Netgear Ex3700, classified under Improper Authentication. CVSS score: 8.8/10. Published 2020-04-22.

How severe is CVE-2017-18772?

High severity. CVSS v3 base score is 8.8 out of 10.

Auth bypass in Netgear Ex3700

CVE-2017-18772

Certain NETGEAR devices are affected by authentication bypass. This affects EX3700 before 1.0.0.64, EX3800 before 1.0.0.64, EX6120 before 1.0.0.32, EX6130 before 1.0.0.16, R6300v2 before 1.0.4.12, R6700 before 1.0.1.26, R6900 before 1.0.1…

Vulnerability class: Broken Authentication

EPSS: 0.006 (44.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Netgear Ex3700
Netgear Ex3700_firmware
Netgear Ex3800
Netgear Ex3800_firmware
Netgear Ex6120
Netgear Ex6120_firmware
Netgear Ex6130
Netgear Ex6130_firmware
Netgear R6300 — versions v2
Netgear R6300_firmware

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-18772?: CVE-2017-18772 is a high-severity vulnerability in Netgear Ex3700, classified under Improper Authentication. CVSS score: 8.8/10. Published 2020-04-22.
How severe is CVE-2017-18772?: High severity. CVSS v3 base score is 8.8 out of 10.