What is CVE-2017-18867?

CVE-2017-18867 is a medium-severity vulnerability in Netgear D6100, classified under Improper Input Validation. CVSS score: 6.8/10. Published 2020-05-05.

How severe is CVE-2017-18867?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Improper input validation in Netgear D6100

CVE-2017-18867

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6100 before 1.0.0.55, D7800 before V1.0.1.24, R7100LG before V1.0.0.32, WNDR4300v1 before 1.0.2.90, and WNDR4500v3 before 1.0.0.48.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.004 (31.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Netgear D6100
Netgear D6100_firmware
Netgear D7800
Netgear D7800_firmware
Netgear R7100lg
Netgear R7100lg_firmware
Netgear Wndr4300 — versions v1
Netgear Wndr4300_firmware
Netgear Wndr4500 — versions v3
Netgear Wndr4500_firmware

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2017-18867?: CVE-2017-18867 is a medium-severity vulnerability in Netgear D6100, classified under Improper Input Validation. CVSS score: 6.8/10. Published 2020-05-05.
How severe is CVE-2017-18867?: Medium severity. CVSS v3 base score is 6.8 out of 10.