CVE-2017-18710 Information disclosure in n/a

Medium 4.3 Published 24 Apr 2020 Updated 5 Aug 2024

Attackers can access sensitive information from NETGEAR R8300 and R8500 routers, requiring firmware updates to mitigate.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2017-18710?

CVE-2017-18710 is a medium-severity vulnerability in Netgear R8300 Firmware, published on 24 Apr 2020. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R8300 before 1.0.2.106 and R8500 before 1.0.2.106.

Weakness: CWE-200

Which versions are affected by CVE-2017-18710?

It affects 2 products.

Products include Netgear R8300 Firmware, Netgear R8500 Firmware.

How do I fix CVE-2017-18710?

No fix has been published for CVE-2017-18710 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-18710 being exploited?

There is no known exploitation of CVE-2017-18710 in the wild and no public exploit code.

All Netgear R8300 Firmware vulnerabilities

Sources

Also known as GHSA-r3xm-q6rq-6mcp.