CVE-2017-18744
Summary
| CVE | CVE-2017-18744 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-04-23 16:15:00 UTC |
| Updated | 2020-04-23 22:17:00 UTC |
| Description | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6250 before 1.0.4.12, R6300v2 before 1.0.4.12, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.4, R7900 before 1.0.1.12, R8000 before 1.0.3.24, and R8500 before 1.0.2.74. |
Risk And Classification
Problem Types: CWE-120
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Netgear | R6250 | - | All | All | All |
| Hardware | Netgear | R6250 | - | All | All | All |
| Operating System | Netgear | R6250 Firmware | All | All | All | All |
| Operating System | Netgear | R6250 Firmware | All | All | All | All |
| Hardware | Netgear | R6300 | v2 | All | All | All |
| Hardware | Netgear | R6300 | v2 | All | All | All |
| Operating System | Netgear | R6300 Firmware | All | All | All | All |
| Operating System | Netgear | R6300 Firmware | All | All | All | All |
| Hardware | Netgear | R6700 | - | All | All | All |
| Hardware | Netgear | R6700 | - | All | All | All |
| Operating System | Netgear | R6700 Firmware | All | All | All | All |
| Operating System | Netgear | R6700 Firmware | All | All | All | All |
| Hardware | Netgear | R6900 | - | All | All | All |
| Hardware | Netgear | R6900 | - | All | All | All |
| Operating System | Netgear | R6900 Firmware | All | All | All | All |
| Operating System | Netgear | R6900 Firmware | All | All | All | All |
| Hardware | Netgear | R7000 | - | All | All | All |
| Hardware | Netgear | R7000 | - | All | All | All |
| Operating System | Netgear | R7000 Firmware | All | All | All | All |
| Operating System | Netgear | R7000 Firmware | All | All | All | All |
| Hardware | Netgear | R7900 | - | All | All | All |
| Hardware | Netgear | R7900 | - | All | All | All |
| Operating System | Netgear | R7900 Firmware | All | All | All | All |
| Operating System | Netgear | R7900 Firmware | All | All | All | All |
| Hardware | Netgear | R8000 | - | All | All | All |
| Hardware | Netgear | R8000 | - | All | All | All |
| Operating System | Netgear | R8000 Firmware | All | All | All | All |
| Operating System | Netgear | R8000 Firmware | All | All | All | All |
| Hardware | Netgear | R8500 | - | All | All | All |
| Hardware | Netgear | R8500 | - | All | All | All |
| Operating System | Netgear | R8500 Firmware | All | All | All | All |
| Operating System | Netgear | R8500 Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Advisory for Pre-Authentication Buffer Overflow on Some Routers, PSV-2017-0324 | Answer | NETGEAR Support | CONFIRM | kb.netgear.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.