Cross-Site Request Forgery in NETGEAR Routers
CVE-2017-18848

8.8HIGH

Key Information:

Vendor

Netgear
Status
R6300 Firmware
Vendor
CVE Published:
20 April 2020

What is CVE-2017-18848?

Certain NETGEAR routers are susceptible to Cross-Site Request Forgery (CSRF) attacks, allowing an unauthorized user to make requests on behalf of a legitimate user. This vulnerability impacts models R6300v2, AC1450, R7300, and R8500, exposing sensitive configurations to potential malicious manipulation without user consent. It is crucial for users of affected models to apply the necessary firmware updates to mitigate this risk.

References

https://kb.netgear.com/000049011/Security-Advisory-for-Cr...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.