CVE-2017-18849
Estado: ModificadaAlta (7.8)—
Certain NETGEAR devices are affected by command injection. This affects D6220 before 1.0.0.26, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.12, R6400 before 1.01.24, R6400v2 before 1.0.2.30, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R6900P before 1.0.0.56, R7000 before 1.0.9.4, R7000P before 1.0.0.56, R7100LG before 1.0.0.32, R7300DST before 1.0.0.54, R7900 before 1.0.1.18, R8000 before 1.0.3.44, R8300 before 1.0.2.100_1.0.82, and R8500 before 1.0.2.100_1.0.82.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 7.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.89%
- Percentil entre todas las CVEs puntuadas: 58
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (16)
Netgear — D6220 FirmwareNetgear — D6400 FirmwareNetgear — D8500 FirmwareNetgear — R6250 FirmwareNetgear — R6400 FirmwareNetgear — R6700 FirmwareNetgear — R6900 FirmwareNetgear — R6900p FirmwareNetgear — R7000 FirmwareNetgear — R7000p FirmwareNetgear — R7100lg FirmwareNetgear — R7300dst FirmwareNetgear — R7900 FirmwareNetgear — R8000 FirmwareNetgear — R8300 FirmwareNetgear — R8500 Firmware
CWE
- CWE-74
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2017-18849",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.6,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Secondary",
"source": "cve@mitre.org",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 8.4,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.5
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2020-04-20T16:15:13.977",
"references": [
{
"url": "https://kb.netgear.com/000048999/Security-Advisory-for-Command-Injection-on-Some-Routers-and-Modem-Routers-PSV-2017-1209",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://kb.netgear.com/000048999/Security-Advisory-for-Command-Injection-on-Some-Routers-and-Modem-Routers-PSV-2017-1209",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-74"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Certain NETGEAR devices are affected by command injection. This affects D6220 before 1.0.0.26, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.12, R6400 before 1.01.24, R6400v2 before 1.0.2.30, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R6900P before 1.0.0.56, R7000 before 1.0.9.4, R7000P before 1.0.0.56, R7100LG before 1.0.0.32, R7300DST before 1.0.0.54, R7900 before 1.0.1.18, R8000 before 1.0.3.44, R8300 before 1.0.2.100_1.0.82, and R8500 before 1.0.2.100_1.0.82."
},
{
"lang": "es",
"value": "Determinados dispositivos NETGEAR están afectados por una inyección de comandos. Esto afecta a D6220 versiones anteriores a 1.0.0.26, D6400 versiones anteriores a 1.0.0.60, D8500 versiones anteriores a 1.0.3.29, R6250 versiones anteriores a 1.0.4.12, R6400 versiones anteriores a 1.01.24, R6400v2 versiones anteriores a 1.0.2.30, R6700 versiones anteriores a 1.0.1.22, R6900 versiones anteriores a 1.0.1.22, R6900P versiones anteriores a 1. 0.0.56, R7000 anteriores a 1.0.9.4, R7000P anteriores a 1.0.0.56, R7100LG anteriores a 1.0.0.32, R7300DST anteriores a 1.0.0.54, R7900 anteriores a 1.0.1.18, R8000 anteriores a 1.0.3.44, R8300 anteriores a 1.0.2.100_1.0.82, y R8500 anteriores a 1.0.2.100_1.0.82."
}
],
"lastModified": "2026-06-17T01:13:41.260",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:d6220_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F0280B99-ED56-4D26-BE97-0218ED4BB715",
"versionEndExcluding": "1.0.0.26"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:d6220:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F3EEA190-2E9C-4586-BF81-B115532FBA23"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:d6400_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D1F0B30-4BB4-4573-BE0D-381B31CD2A36",
"versionEndExcluding": "1.0.0.60"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:d6400:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7D30939B-86E3-4C78-9B05-686B4994C8B9"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:d8500_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "20564DE0-E58D-4628-ADD6-AC7C90AD85F7",
"versionEndExcluding": "1.0.3.29"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:d8500:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "814A0114-9A1D-4EA0-9AF4-6968514E4F01"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r6250_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F3464F16-A6EB-47C0-B2B5-54E86743DC70",
"versionEndExcluding": "1.0.4.12"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r6250:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "321BE843-52C4-4638-A321-439CA7B3A6F2"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9671373D-8C7F-4EBC-84CC-88D5FE2BF75A",
"versionEndExcluding": "1.01.24"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F4621DB5-030E-4370-A6FE-FA3965A616EB",
"versionEndExcluding": "1.0.2.30"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r6400:v2:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "52AE9AD2-BC8D-477D-A3D3-891AE52FA5F3"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C3255EE-BBE5-4EBE-92CC-D0C6E6D8563F",
"versionEndExcluding": "1.0.1.22"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "21B27F11-4262-4CE1-8107-B365A7C152F2"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "24E4CE14-4FC5-4F73-BFC8-F0B0D924F788",
"versionEndExcluding": "1.0.1.22"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E9EF43B-2542-44CE-A1D6-DECCCFBC1F5F",
"versionEndExcluding": "1.0.0.56"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C41908FF-AE64-4949-80E3-BEE061B2DA8A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "026E5574-7296-46A2-916D-7FF7BD3F728A",
"versionEndExcluding": "1.0.9.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ADFE7176-BD34-467C-A167-E869E04A8E97",
"versionEndExcluding": "1.0.0.56"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DFE55F4D-E98B-46D3-B870-041141934CD1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "833A98AF-A4B0-4C68-AACD-6B3F58E64060",
"versionEndExcluding": "1.0.0.32"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "366FA778-3C2A-42AF-9141-DAD7043B406C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r7300dst_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F0EE8EBA-C4CD-4CA1-A684-54338B1254A9",
"versionEndExcluding": "1.0.0.54"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r7300dst:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C75148EB-DE6C-4C5C-BF34-4800A66CF11C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A98DFA81-D1BA-41AE-A6A3-1EBBFC452D0F",
"versionEndExcluding": "1.0.1.18"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "94095689-7542-4F90-9743-F3D98CCFDDEA",
"versionEndExcluding": "1.0.3.44"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5B39F095-8FE8-43FD-A866-7B613B495984"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA4A3678-F7BB-453F-A245-58E58116415B",
"versionEndExcluding": "1.0.2.100_1.0.82"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BAEFC983-46C7-49F2-8A65-7014BB703036",
"versionEndExcluding": "1.0.2.100_1.0.82"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}