Details of VAR-202004-1412

ID

VAR-202004-1412

CVE

CVE-2017-18729

TITLE

plural NETGEAR Out-of-bounds write vulnerabilities in devices

Trust: 0.8

sources: JVNDB: JVNDB-2017-014972

DESCRIPTION

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6020 before 1.0.0.30, R6080 before 1.0.0.30, R6120 before 1.0.0.36, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42. plural NETGEAR The device is vulnerable to out-of-bounds writes.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. NETGEAR D6200, etc. are all products of NETGEAR. NETGEAR D6200 is a wireless modem. NETGEAR R6900 is a wireless router. NETGEAR R6800 is a wireless router. The vulnerability stems from the fact that when a network system or product performs an operation on memory, the data boundary is not correctly verified, resulting in an incorrect read and write operation to other associated memory locations. Attackers can use this vulnerability to cause buffer overflow or heap overflow. This affects D6200 prior to 1.1.00.24, R6020 prior to 1.0.0.30, R6080 prior to 1.0.0.30, R6120 prior to 1.0.0.36, R6700v2 prior to 1.1.0.42, R6800 prior to 1.1.0.42, and R6900v2 prior to 1.1.0.42

Trust: 2.25

sources: NVD: CVE-2017-18729 // JVNDB: JVNDB-2017-014972 // CNVD: CNVD-2020-25049 // VULMON: CVE-2017-18729

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2020-25049

AFFECTED PRODUCTS

vendor:	netgear	model:	d6200	scope:	lt	version:	1.1.00.24	Trust: 1.6
vendor:	netgear	model:	r6800	scope:	lt	version:	1.1.0.42	Trust: 1.6
vendor:	netgear	model:	r6020	scope:	lt	version:	1.0.0.30	Trust: 1.6
vendor:	netgear	model:	r6080	scope:	lt	version:	1.0.0.30	Trust: 1.6
vendor:	netgear	model:	r6700	scope:	lt	version:	1.1.0.42	Trust: 1.0
vendor:	netgear	model:	r6900	scope:	lt	version:	1.1.0.42	Trust: 1.0
vendor:	netgear	model:	r6120	scope:	lt	version:	1.0.0.36	Trust: 1.0
vendor:	netgear	model:	d6200	scope:	eq	version:	1.1.00.24	Trust: 0.8
vendor:	netgear	model:	r6020	scope:	eq	version:	1.0.0.30	Trust: 0.8
vendor:	netgear	model:	r6080	scope:	eq	version:	1.0.0.30	Trust: 0.8
vendor:	netgear	model:	r6120	scope:	eq	version:	1.0.0.36	Trust: 0.8
vendor:	netgear	model:	r6700	scope:	eq	version:	1.1.0.42	Trust: 0.8
vendor:	netgear	model:	r6800	scope:	eq	version:	1.1.0.42	Trust: 0.8
vendor:	netgear	model:	r6900	scope:	eq	version:	1.1.0.42	Trust: 0.8
vendor:	netgear	model:	r6700v2	scope:	lt	version:	1.1.0.42	Trust: 0.6
vendor:	netgear	model:	r6900v2	scope:	lt	version:	1.1.0.42	Trust: 0.6
vendor:	netgear	model:	r6020	scope:	eq	version:	1.0.0.26	Trust: 0.1
vendor:	netgear	model:	r6080	scope:	eq	version:	1.0.0.26	Trust: 0.1
vendor:	netgear	model:	r6120	scope:	eq	version:	1.0.0.30	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	-	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	1.0.1.14	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	1.0.1.16	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	1.0.1.20	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	1.0.1.22	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	1.0.1.26	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	1.0.1.30	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	1.0.1.36	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	1.0.1.44	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	1.0.1.46	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	1.0.1.48	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	1.0.2.32	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	1.0.2.52	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	1.1.0.38	Trust: 0.1
vendor:	netgear	model:	r6800	scope:	eq	version:	1.0.1.10	Trust: 0.1
vendor:	netgear	model:	r6800	scope:	eq	version:	1.1.0.38	Trust: 0.1
vendor:	netgear	model:	r6900	scope:	eq	version:	-	Trust: 0.1
vendor:	netgear	model:	r6900	scope:	eq	version:	1.0.1.14	Trust: 0.1
vendor:	netgear	model:	r6900	scope:	eq	version:	1.0.1.16	Trust: 0.1
vendor:	netgear	model:	r6900	scope:	eq	version:	1.0.1.20	Trust: 0.1
vendor:	netgear	model:	r6900	scope:	eq	version:	1.0.1.22	Trust: 0.1
vendor:	netgear	model:	r6900	scope:	eq	version:	1.0.1.26	Trust: 0.1
vendor:	netgear	model:	r6900	scope:	eq	version:	1.0.1.28	Trust: 0.1
vendor:	netgear	model:	r6900	scope:	eq	version:	1.0.1.30	Trust: 0.1
vendor:	netgear	model:	r6900	scope:	eq	version:	1.0.1.34	Trust: 0.1
vendor:	netgear	model:	r6900	scope:	eq	version:	1.0.1.44	Trust: 0.1
vendor:	netgear	model:	r6900	scope:	eq	version:	1.0.1.46	Trust: 0.1
vendor:	netgear	model:	r6900	scope:	eq	version:	1.0.1.48	Trust: 0.1

sources: CNVD: CNVD-2020-25049 // VULMON: CVE-2017-18729 // JVNDB: JVNDB-2017-014972 // NVD: CVE-2017-18729

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2017-18729
value:	HIGH
Trust: 1.0
cve@mitre.org:	CVE-2017-18729
value:	HIGH
Trust: 1.0
NVD:	JVNDB-2017-014972
value:	HIGH
Trust: 0.8
CNVD:	CNVD-2020-25049
value:	HIGH
Trust: 0.6
CNNVD:	CNNVD-202004-2090
value:	HIGH
Trust: 0.6
VULMON:	CVE-2017-18729
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2017-18729
severity:	MEDIUM
baseScore:	5.8
vectorString:	AV:A/AC:L/AU:N/C:P/I:P/A:P
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	6.5
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.1
NVD:	JVNDB-2017-014972
severity:	MEDIUM
baseScore:	5.8
vectorString:	AV:A/AC:L/AU:N/C:P/I:P/A:P
accessVector:	ADJACENT NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.8
CNVD:	CNVD-2020-25049
severity:	HIGH
baseScore:	8.3
vectorString:	AV:A/AC:L/AU:N/C:C/I:C/A:C
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	6.5
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

nvd@nist.gov:	CVE-2017-18729
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	ADJACENT
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	5.9
version:	3.1
Trust: 1.0
cve@mitre.org:	CVE-2017-18729
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	ADJACENT
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	5.9
version:	3.0
Trust: 1.0
NVD:	JVNDB-2017-014972
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	ADJACENT NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: CNVD: CNVD-2020-25049 // VULMON: CVE-2017-18729 // JVNDB: JVNDB-2017-014972 // CNNVD: CNNVD-202004-2090 // NVD: CVE-2017-18729 // NVD: CVE-2017-18729

PROBLEMTYPE DATA

problemtype:

CWE-787

Trust: 1.8

sources: JVNDB: JVNDB-2017-014972 // NVD: CVE-2017-18729

THREAT TYPE

remote or local

Trust: 0.6

sources: CNNVD: CNNVD-202004-2090

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202004-2090

CONFIGURATIONS

sources: JVNDB: JVNDB-2017-014972

PATCH

title:	Security Advisory for Pre-Authentication Stack Overflow on Some Routers and Gateways, PSV-2017-2135	url:	https://kb.netgear.com/000051526/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers-and-Gateways-PSV-2017-2135	Trust: 0.8
title:	Patch for Multiple NETGEAR product buffer overflow vulnerabilities (CNVD-2020-25049)	url:	https://www.cnvd.org.cn/patchInfo/show/215517	Trust: 0.6
title:	Multiple NETGEAR Product Buffer Error Vulnerability Fix	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=117015	Trust: 0.6

sources: CNVD: CNVD-2020-25049 // JVNDB: JVNDB-2017-014972 // CNNVD: CNNVD-202004-2090

EXTERNAL IDS

db:	NVD	id:	CVE-2017-18729	Trust: 3.1
db:	JVNDB	id:	JVNDB-2017-014972	Trust: 0.8
db:	CNVD	id:	CNVD-2020-25049	Trust: 0.6
db:	CNNVD	id:	CNNVD-202004-2090	Trust: 0.6
db:	VULMON	id:	CVE-2017-18729	Trust: 0.1

sources: CNVD: CNVD-2020-25049 // VULMON: CVE-2017-18729 // JVNDB: JVNDB-2017-014972 // CNNVD: CNNVD-202004-2090 // NVD: CVE-2017-18729

REFERENCES

url:	https://nvd.nist.gov/vuln/detail/cve-2017-18729	Trust: 2.0
url:	https://kb.netgear.com/000051526/security-advisory-for-pre-authentication-stack-overflow-on-some-routers-and-gateways-psv-2017-2135	Trust: 1.7
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-18729	Trust: 0.8
url:	https://cwe.mitre.org/data/definitions/787.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: CNVD: CNVD-2020-25049 // VULMON: CVE-2017-18729 // JVNDB: JVNDB-2017-014972 // CNNVD: CNNVD-202004-2090 // NVD: CVE-2017-18729

SOURCES

db:	CNVD	id:	CNVD-2020-25049
db:	VULMON	id:	CVE-2017-18729
db:	JVNDB	id:	JVNDB-2017-014972
db:	CNNVD	id:	CNNVD-202004-2090
db:	NVD	id:	CVE-2017-18729

LAST UPDATE DATE

2024-11-23T22:29:38.983000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2020-25049	date:	2020-04-30T00:00:00
db:	VULMON	id:	CVE-2017-18729	date:	2020-04-30T00:00:00
db:	JVNDB	id:	JVNDB-2017-014972	date:	2020-05-26T00:00:00
db:	CNNVD	id:	CNNVD-202004-2090	date:	2020-05-06T00:00:00
db:	NVD	id:	CVE-2017-18729	date:	2024-11-21T03:20:46.307

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2020-25049	date:	2020-04-26T00:00:00
db:	VULMON	id:	CVE-2017-18729	date:	2020-04-24T00:00:00
db:	JVNDB	id:	JVNDB-2017-014972	date:	2020-05-26T00:00:00
db:	CNNVD	id:	CNNVD-202004-2090	date:	2020-04-24T00:00:00
db:	NVD	id:	CVE-2017-18729	date:	2020-04-24T13:15:11.500