CVE-2017-18754

No fix known EPSS <1%CVSS 6.8

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WNDR3700v4 before 1.0.2.88, WNDR4300v1 before 1.0.2.90, and WNR2000v5 before 1.0.0.58.

Published 2020-04-22 · CVE record · OSV

Products: netgear wndr3700_firmware, netgear wndr4300_firmware, netgear wnr2000_firmware