What is CVE-2017-18789?

CVE-2017-18789 is a medium-severity vulnerability in Netgear D6220, classified under Information Disclosure. CVSS score: 5.5/10. Published 2020-04-22.

How severe is CVE-2017-18789?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Information disclosure in Netgear D6220

CVE-2017-18789

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R6250 before V1.0.4.8, R6400 before V1.0.1.22, R6400v2 before V1.0.2.32, R7100LG before V1.0.0.32, R7300 before V1.0.0.52, R8300 before V1.0.2.94, R8…

Vulnerability class: Information Disclosure

EPSS: 0.003 (23.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Netgear D6220
Netgear D6220_firmware
Netgear D6400
Netgear D6400_firmware
Netgear D8500
Netgear D8500_firmware
Netgear R6250
Netgear R6250_firmware
Netgear R6400 — versions v2
Netgear R6400_firmware

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-18789?: CVE-2017-18789 is a medium-severity vulnerability in Netgear D6220, classified under Information Disclosure. CVSS score: 5.5/10. Published 2020-04-22.
How severe is CVE-2017-18789?: Medium severity. CVSS v3 base score is 5.5 out of 10.