What is CVE-2017-18777?

CVE-2017-18777 is a high-severity vulnerability in Netgear D6220, classified under Insufficiently Protected Credentials. CVSS score: 7.8/10. Published 2020-04-22.

How severe is CVE-2017-18777?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Netgear D6220

CVE-2017-18777

Certain NETGEAR devices are affected by administrative password disclosure. This affects D6220 before V1.0.0.28, D6400 before V1.0.0.60, D8500 before V1.0.3.29, DGN2200v4 before 1.0.0.82, DGN2200Bv4 before 1.0.0.82, R6300v2 before 1.0.4.8…

EPSS: 0.003 (20.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Netgear D6220
Netgear D6220_firmware
Netgear D6400
Netgear D6400_firmware
Netgear D8500
Netgear D8500_firmware
Netgear Dgn2200 — versions v4
Netgear Dgn2200b — versions v4
Netgear Dgn2200b_firmware
Netgear Dgn2200_firmware

Weakness classification (CWE)

CWE-522 — Insufficiently Protected Credentials

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-18777?: CVE-2017-18777 is a high-severity vulnerability in Netgear D6220, classified under Insufficiently Protected Credentials. CVSS score: 7.8/10. Published 2020-04-22.
How severe is CVE-2017-18777?: High severity. CVSS v3 base score is 7.8 out of 10.