CVE-2017-18789

5.5 mediumEPSS 0.3%

Medium (5.5) in netgear. EPSS 0.3% chance of exploitation in the next 30 days.

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R6250 before V1.0.4.8, R6400 before V1.0.1.22, R6400v2 before V1.0.2.32, R7100LG before V1.0.0.32, R7300 before V1.0.0.52, R8300 before V1.0.2.94, R8500 before V1.0.2.100, D6220 before V1.0.0.28, D6400 before V1.0.0.60, and D8500 before V1.0.3.29.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2020-04-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

netgear:d6220_firmware
netgear:d6400_firmware
netgear:d8500_firmware
netgear:r6250_firmware
netgear:r6400_firmware
netgear:r7100lg_firmware
netgear:r7300_firmware
netgear:r8300_firmware
netgear:r8500_firmware

References

https://kb.netgear.com/000049373/Security-Advisory-for-Sensitive-Information-Disclosure-Vulnerability-on-Some-Routers-and-Some-DSL-Modem-Routers-PSV-2017-0426
https://kb.netgear.com/000049373/Security-Advisory-for-Sensitive-Information-Disclosure-Vulnerability-on-Some-Routers-and-Some-DSL-Modem-Routers-PSV-2017-0426

Check your stack JSON