CSRF and Authentication Bypass Vulnerabilities in NETGEAR Routers

CVE-2017-18852

Summary

Certain NETGEAR router models are susceptible to vulnerabilities that allow attackers to execute Cross-Site Request Forgery (CSRF) attacks, enabling unauthorized actions without the victim's consent. The affected models include the R7300DST, R8300, R8500, and WNDR3400v3, posing a significant risk if not properly updated to the latest firmware. Users are advised to ensure their devices are running the recommended firmware versions to mitigate these vulnerabilities.

References