Security Misconfiguration in Multiple NETGEAR Routers, Gateways, and Extenders
CVE-2018-21230

5.2MEDIUM

Key Information:

Vendor

Netgear
Status
D1500 Firmware
Vendor
CVE Published:
24 April 2020

What is CVE-2018-21230?

Certain NETGEAR devices are vulnerable due to incorrect configuration of security settings, impacting various router and extender models. This misconfiguration can lead to unauthorized access, exposing the network to potential threats. Users are advised to update their devices to the latest firmware versions to mitigate risks associated with this vulnerability.

References

https://kb.netgear.com/000055104/Security-Advisory-for-Se...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.