CVE-2017-18846

Certain NETGEAR devices are affected by a stack-based buffer overflow. This affects R6250 before 1.0.4.12, R6400v2 before 1.0.2.32, R7000P/R6900P before 1.0.0.56, R7900 before 1.0.1.18, R8300 before 1.0.2.100_1.0.82, R8500 before 1.0.2.100_1.0.82, and D8500 before 1.0.3.29.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.7 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
mitreCNA
6.7 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.0/AC:L/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:N
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 15%
VendorProductVersion
netgearr6250_firmware
𝑥
< 1.0.4.12
netgearr6400_firmware
𝑥
< 1.0.2.32
netgearr7000p_firmware
𝑥
< 1.0.0.56
netgearr6900p_firmware
𝑥
< 1.0.0.56
netgearr7900_firmware
𝑥
< 1.0.1.18
netgearr8300_firmware
𝑥
< 1.0.2.100_1.0.82
netgearr8500_firmware
𝑥
< 1.0.2.100_1.0.82
netgeard8500_firmware
𝑥
< 1.0.3.29
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://kb.netgear.com/000049013/Security-Advisory-for-Stack-Overflow-on-Some-Routers-PSV-PSV-2017-0793
https://kb.netgear.com/000049013/Security-Advisory-for-Stack-Overflow-on-Some-Routers-PSV-PSV-2017-0793