What is CVE-2018-21165?

CVE-2018-21165 is a medium-severity vulnerability in Netgear R6100. CVSS score: 4.9/10. Published 2020-04-23.

How severe is CVE-2018-21165?

Medium severity. CVSS v3 base score is 4.9 out of 10.

Vulnerability in Netgear R6100

CVE-2018-21165

Certain NETGEAR devices are affected by denial of service. This affects R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7800 before 1.0.2.42, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.54, WNDR4500v3 before 1.0.0.54, and WNR2000v5 before 1.0.0.64.

EPSS: 0.011 (63.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.9 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H.

Affected products

Netgear R6100
Netgear R6100_firmware
Netgear R7500
Netgear R7500_firmware
Netgear R7800
Netgear R7800_firmware
Netgear R8900
Netgear R8900_firmware
Netgear R9000
Netgear R9000_firmware

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2018-21165?: CVE-2018-21165 is a medium-severity vulnerability in Netgear R6100. CVSS score: 4.9/10. Published 2020-04-23.
How severe is CVE-2018-21165?: Medium severity. CVSS v3 base score is 4.9 out of 10.