Vulnerability Details CVE-2017-18851
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D8500 through 1.0.3.28, R6400 through 1.0.1.22, R6400v2 through 1.0.2.18, R8300 through 1.0.2.94, R8500 through 1.0.2.94, and R6100 through 1.0.1.12.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 29.3%
CVSS Severity
CVSS v3 Score 6.7
CVSS v2 Score 4.6
References
Products affected by CVE-2017-18851
-
cpe:2.3:h:netgear:d8500:-
-
cpe:2.3:h:netgear:r6100:-
-
cpe:2.3:h:netgear:r6400:-
-
cpe:2.3:h:netgear:r6400:v2
-
cpe:2.3:h:netgear:r8300:-
-
cpe:2.3:h:netgear:r8500:-
-
cpe:2.3:o:netgear:d8500_firmware:-
-
cpe:2.3:o:netgear:d8500_firmware:1.0.3.27
-
cpe:2.3:o:netgear:r6100_firmware:-
-
cpe:2.3:o:netgear:r6100_firmware:1.0.1.1
-
cpe:2.3:o:netgear:r6400_firmware:-
-
cpe:2.3:o:netgear:r6400_firmware:1.0.1.12
-
cpe:2.3:o:netgear:r6400_firmware:1.0.1.14
-
cpe:2.3:o:netgear:r6400_firmware:1.0.1.18
-
cpe:2.3:o:netgear:r6400_firmware:1.0.1.20
-
cpe:2.3:o:netgear:r6400_firmware:1.0.1.24
-
cpe:2.3:o:netgear:r6400_firmware:1.0.1.32
-
cpe:2.3:o:netgear:r6400_firmware:1.0.1.36
-
cpe:2.3:o:netgear:r6400_firmware:1.0.1.42
-
cpe:2.3:o:netgear:r6400_firmware:1.0.1.44
-
cpe:2.3:o:netgear:r6400_firmware:1.0.1.46
-
cpe:2.3:o:netgear:r6400_firmware:1.0.1.50
-
cpe:2.3:o:netgear:r6400_firmware:1.0.1.52
-
cpe:2.3:o:netgear:r6400_firmware:1.0.1.62
-
cpe:2.3:o:netgear:r6400_firmware:1.0.1.62_1.0.41
-
cpe:2.3:o:netgear:r6400_firmware:1.0.1.68
-
cpe:2.3:o:netgear:r6400_firmware:1.0.1.70
-
cpe:2.3:o:netgear:r6400_firmware:1.0.1.74
-
cpe:2.3:o:netgear:r6400_firmware:1.0.1.76
-
cpe:2.3:o:netgear:r6400_firmware:1.0.1.78
-
cpe:2.3:o:netgear:r8300_firmware:-
-
cpe:2.3:o:netgear:r8300_firmware:1.0.2.74
-
cpe:2.3:o:netgear:r8300_firmware:1.0.2.86
-
cpe:2.3:o:netgear:r8500_firmware:-
-
cpe:2.3:o:netgear:r8500_firmware:1.0.2.74
-
cpe:2.3:o:netgear:r8500_firmware:1.0.2.86