CVE-2017-18847

Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects R6400v2 before 1.0.2.32, R7000P/R6900P before 1.0.0.56, R7900 before 1.0.1.18, R8300 before 1.0.2.100_1.0.82, R8500 before 1.0.2.100_1.0.82, and D8500 before 1.0.3.29.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
mitreCNA
6.2 MEDIUM
LOCAL
LOW
NONE
CVSS:3.0/AC:L/AV:L/A:N/C:H/I:N/PR:N/S:U/UI:N
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 19%
VendorProductVersion
netgearr6400_firmware
𝑥
< 1.0.2.32
netgearr7000p_firmware
𝑥
< 1.0.0.56
netgearr6900p_firmware
𝑥
< 1.0.0.56
netgearr7900_firmware
𝑥
< 1.0.1.18
netgearr8300_firmware
𝑥
< 1.0.2.100_1.0.82
netgearr8500_firmware
𝑥
< 1.0.2.100_1.0.82
netgeard8500_firmware
𝑥
< 1.0.3.29
𝑥
= Vulnerable software versions