CVE-2018-21161 Misconfiguration in n/a
Incorrect security settings in NETGEAR routers allow attackers to bypass security controls, requiring firmware updates to remediate.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2018-21161?
CVE-2018-21161 is a high-severity vulnerability in Netgear D7800 Firmware, published on 23 Apr 2020. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.34, R7800 before 1.0.2.46, and R9000 before 1.0.3.16.
Which versions are affected by CVE-2018-21161?
It affects 3 products.
Products include Netgear D7800 Firmware, Netgear R7800 Firmware, Netgear R9000 Firmware.
How do I fix CVE-2018-21161?
No fix has been published for CVE-2018-21161 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-21161 being exploited?
There is no known exploitation of CVE-2018-21161 in the wild and no public exploit code.
Other vulnerabilities in Netgear D7800 Firmware
Sources
Also known as GHSA-r96w-9924-q3fv.