Command Injection Vulnerability in NETGEAR Routers
CVE-2017-18796

6.7MEDIUM

Key Information:

Vendor: Netgear
Status: R6400 Firmware
Vendor: CVE Published:; 21 April 2020

What is CVE-2017-18796?

Certain NETGEAR routers are susceptible to a command injection vulnerability, allowing unauthenticated attackers to execute arbitrary commands on the device. This issue affects multiple models when running specific firmware versions, enabling unauthorized access and potential control over the network traffic.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://kb.netgear.com/000049366/Security-Advisory-for-Co...

x_refsource_CONFIRM

CVSS V3.1

Score:

6.7

Severity:

MEDIUM

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

High

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 21, 2020
Vulnerability Reserved
Apr 20, 2020

JSON

Netgear

What is CVE-2017-18796?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.