CVE-2017-18864

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6400 before 1.0.1.24, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.4, R7000P before 1.0.0.56, R6900P before 1.0.0.56, R7100LG before 1.0.0.32, R7300 before 1.0.0.54, R7900 before 1.0.1.18, R8300 before 1.0.2.104, and R8500 before 1.0.2.104.
Classic Buffer Overflow
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
ADJACENT_NETWORK
LOW
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitreCNA
8.8 HIGH
ADJACENT_NETWORK
LOW
NONE
CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:U/UI:N
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 69%
VendorProductVersion
netgearr6400_firmware
𝑥
< 1.0.1.24
netgearr6400_firmware
𝑥
< 1.0.2.32
netgearr6700_firmware
𝑥
< 1.0.1.22
netgearr6900_firmware
𝑥
< 1.0.1.22
netgearr6900p_firmware
𝑥
< 1.0.0.56
netgearr7000_firmware
𝑥
< 1.0.9.4
netgearr7000p_firmware
𝑥
< 1.0.0.56
netgearr7100lg_firmware
𝑥
< 1.0.0.32
netgearr7300_firmware
𝑥
< 1.0.0.54
netgearr7900_firmware
𝑥
< 1.0.1.18
netgearr8300_firmware
𝑥
< 1.0.2.104
netgearr8500_firmware
𝑥
< 1.0.2.104
𝑥
= Vulnerable software versions