Cross-Site Request Forgery Vulnerability in NETGEAR Routers
CVE-2017-18755

8.8HIGH

Key Information:

Vendor

Netgear
Status
R6300 Firmware
Vendor
CVE Published:
22 April 2020

What is CVE-2017-18755?

Certain NETGEAR routers are susceptible to a Cross-Site Request Forgery (CSRF) attack, which could allow an unauthorized user to execute commands on behalf of an authenticated user. This vulnerability affects a variety of router models and firmware versions, making it crucial for users to verify and update their devices to the latest firmware versions to mitigate potential attacks. For detailed information and mitigation steps, refer to the NETGEAR security advisory.

References

https://kb.netgear.com/000051493/Security-Advisory-for-Cr...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.