CVE-2017-18755 Information

Description

Certain NETGEAR devices are affected by CSRF. This affects R6300v2 before 1.0.4.8 R6400v2 before 1.0.2.32 R6700 before 1.0.1.22 R6900 before 1.0.1.22 R7000P before 1.0.0.86 R6900P before 1.0.0.56 R7300 before 1.0.0.54 R8300 before 1.0.2.106 R8500 before 1.0.2.106 DGN2200v4 before 1.0.0.86 DGND2200Bv4 before 1.0.0.86 R6050 before 1.0.0.86 JR6150 before 1.0.1.10 R6220 before 1.1.0.50 and WNDR3700v5 before V1.1.0.48.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Reference

https://kb.netgear.com/000051493/Security-Advisory-for-Cross-Site-Request-Forgery-on-Routers-and-Modem-Routers-PSV-2017-0333

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

REQUIRED

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

HIGH

Base Severity

8.8