What is CVE-2017-18775?

CVE-2017-18775 is a high-severity vulnerability in Netgear R6100, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.8/10. Published 2020-04-22.

How severe is CVE-2017-18775?

High severity. CVSS v3 base score is 8.8 out of 10.

CSRF in Netgear R6100

CVE-2017-18775

Certain NETGEAR devices are affected by CSRF. This affects R6100 before 1.0.1.12, R7500 before 1.0.0.108, WNDR3700v4 before 1.0.2.86, WNDR4300v1 before 1.0.2.88, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR2000v5 before…

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.005 (41.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Netgear R6100
Netgear R6100_firmware
Netgear R7500
Netgear R7500_firmware
Netgear Wndr3700 — versions v4
Netgear Wndr3700_firmware
Netgear Wndr4300 — versions v1, v2
Netgear Wndr4300_firmware
Netgear Wndr4500 — versions v3
Netgear Wndr4500_firmware

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-18775?: CVE-2017-18775 is a high-severity vulnerability in Netgear R6100, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.8/10. Published 2020-04-22.
How severe is CVE-2017-18775?: High severity. CVSS v3 base score is 8.8 out of 10.