Details of VAR-202004-1413

ID

VAR-202004-1413

CVE

CVE-2017-18730

TITLE

plural NETGEAR Out-of-bounds write vulnerabilities in devices

Trust: 0.8

sources: JVNDB: JVNDB-2017-014973

DESCRIPTION

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6020 before 1.0.0.30, R6080 before 1.0.0.30, R6120 before 1.0.0.36, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42. plural NETGEAR The device is vulnerable to out-of-bounds writes.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. NETGEAR R6700, etc. are all products of NETGEAR. NETGEAR R6700 is a wireless router. NETGEAR D6200 is a wireless modem. NETGEAR R6800 is a wireless router. The vulnerability stems from the fact that when a network system or product performs an operation on memory, the data boundary is not correctly verified, resulting in an incorrect read and write operation to other associated memory locations. Attackers can use this vulnerability to cause buffer overflow or heap overflow. This affects D6200 prior to 1.1.00.24, R6020 prior to 1.0.0.30, R6080 prior to 1.0.0.30, R6120 prior to 1.0.0.36, R6700v2 prior to 1.1.0.42, R6800 prior to 1.1.0.42, and R6900v2 prior to 1.1.0.42

Trust: 2.25

sources: NVD: CVE-2017-18730 // JVNDB: JVNDB-2017-014973 // CNVD: CNVD-2020-25838 // VULMON: CVE-2017-18730

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2020-25838

AFFECTED PRODUCTS

vendor:	netgear	model:	d6200	scope:	lt	version:	1.1.00.24	Trust: 1.6
vendor:	netgear	model:	r6800	scope:	lt	version:	1.1.0.42	Trust: 1.6
vendor:	netgear	model:	r6020	scope:	lt	version:	1.0.0.30	Trust: 1.6
vendor:	netgear	model:	r6080	scope:	lt	version:	1.0.0.30	Trust: 1.6
vendor:	netgear	model:	r6120	scope:	lt	version:	1.0.0.36	Trust: 1.6
vendor:	netgear	model:	r6700	scope:	lt	version:	1.1.0.42	Trust: 1.0
vendor:	netgear	model:	r6900	scope:	lt	version:	1.1.0.42	Trust: 1.0
vendor:	netgear	model:	d6200	scope:	eq	version:	1.1.00.24	Trust: 0.8
vendor:	netgear	model:	r6020	scope:	eq	version:	1.0.0.30	Trust: 0.8
vendor:	netgear	model:	r6080	scope:	eq	version:	1.0.0.30	Trust: 0.8
vendor:	netgear	model:	r6120	scope:	eq	version:	1.0.0.36	Trust: 0.8
vendor:	netgear	model:	r6700	scope:	eq	version:	1.1.0.42	Trust: 0.8
vendor:	netgear	model:	r6800	scope:	eq	version:	1.1.0.42	Trust: 0.8
vendor:	netgear	model:	r6900	scope:	eq	version:	1.1.0.42	Trust: 0.8
vendor:	netgear	model:	r6700v2	scope:	lt	version:	1.1.0.42	Trust: 0.6
vendor:	netgear	model:	r6900v2	scope:	lt	version:	1.1.0.42	Trust: 0.6
vendor:	netgear	model:	r6020	scope:	eq	version:	1.0.0.26	Trust: 0.1
vendor:	netgear	model:	r6080	scope:	eq	version:	1.0.0.26	Trust: 0.1
vendor:	netgear	model:	r6120	scope:	eq	version:	1.0.0.30	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	-	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	1.0.1.14	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	1.0.1.16	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	1.0.1.20	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	1.0.1.22	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	1.0.1.26	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	1.0.1.30	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	1.0.1.36	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	1.0.1.44	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	1.0.1.46	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	1.0.1.48	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	1.0.2.32	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	1.0.2.52	Trust: 0.1
vendor:	netgear	model:	r6700	scope:	eq	version:	1.1.0.38	Trust: 0.1
vendor:	netgear	model:	r6800	scope:	eq	version:	1.0.1.10	Trust: 0.1
vendor:	netgear	model:	r6800	scope:	eq	version:	1.1.0.38	Trust: 0.1
vendor:	netgear	model:	r6900	scope:	eq	version:	-	Trust: 0.1
vendor:	netgear	model:	r6900	scope:	eq	version:	1.0.1.14	Trust: 0.1
vendor:	netgear	model:	r6900	scope:	eq	version:	1.0.1.16	Trust: 0.1
vendor:	netgear	model:	r6900	scope:	eq	version:	1.0.1.20	Trust: 0.1
vendor:	netgear	model:	r6900	scope:	eq	version:	1.0.1.22	Trust: 0.1
vendor:	netgear	model:	r6900	scope:	eq	version:	1.0.1.26	Trust: 0.1
vendor:	netgear	model:	r6900	scope:	eq	version:	1.0.1.28	Trust: 0.1
vendor:	netgear	model:	r6900	scope:	eq	version:	1.0.1.30	Trust: 0.1
vendor:	netgear	model:	r6900	scope:	eq	version:	1.0.1.34	Trust: 0.1
vendor:	netgear	model:	r6900	scope:	eq	version:	1.0.1.44	Trust: 0.1
vendor:	netgear	model:	r6900	scope:	eq	version:	1.0.1.46	Trust: 0.1
vendor:	netgear	model:	r6900	scope:	eq	version:	1.0.1.48	Trust: 0.1

sources: CNVD: CNVD-2020-25838 // VULMON: CVE-2017-18730 // JVNDB: JVNDB-2017-014973 // NVD: CVE-2017-18730

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2017-18730
value:	HIGH
Trust: 1.0
cve@mitre.org:	CVE-2017-18730
value:	HIGH
Trust: 1.0
NVD:	JVNDB-2017-014973
value:	HIGH
Trust: 0.8
CNVD:	CNVD-2020-25838
value:	HIGH
Trust: 0.6
CNNVD:	CNNVD-202004-2091
value:	HIGH
Trust: 0.6
VULMON:	CVE-2017-18730
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2017-18730
severity:	MEDIUM
baseScore:	5.8
vectorString:	AV:A/AC:L/AU:N/C:P/I:P/A:P
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	6.5
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.1
NVD:	JVNDB-2017-014973
severity:	MEDIUM
baseScore:	5.8
vectorString:	AV:A/AC:L/AU:N/C:P/I:P/A:P
accessVector:	ADJACENT NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.8
CNVD:	CNVD-2020-25838
severity:	HIGH
baseScore:	8.3
vectorString:	AV:A/AC:L/AU:N/C:C/I:C/A:C
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	6.5
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

nvd@nist.gov:	CVE-2017-18730
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	ADJACENT
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	5.9
version:	3.1
Trust: 1.0
cve@mitre.org:	CVE-2017-18730
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	ADJACENT
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	5.9
version:	3.0
Trust: 1.0
NVD:	JVNDB-2017-014973
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	ADJACENT NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: CNVD: CNVD-2020-25838 // VULMON: CVE-2017-18730 // JVNDB: JVNDB-2017-014973 // CNNVD: CNNVD-202004-2091 // NVD: CVE-2017-18730 // NVD: CVE-2017-18730

PROBLEMTYPE DATA

problemtype:

CWE-787

Trust: 1.8

sources: JVNDB: JVNDB-2017-014973 // NVD: CVE-2017-18730

THREAT TYPE

remote or local

Trust: 0.6

sources: CNNVD: CNNVD-202004-2091

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202004-2091

CONFIGURATIONS

sources: JVNDB: JVNDB-2017-014973

PATCH

title:	Security Advisory for Pre-Authentication Stack Overflow on Some Routers and Gateways, PSV-2017-2134	url:	https://kb.netgear.com/000051525/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers-and-Gateways-PSV-2017-2134	Trust: 0.8
title:	Patch for Multiple NETGEAR product buffer overflow vulnerabilities (CNVD-2020-25838)	url:	https://www.cnvd.org.cn/patchInfo/show/215973	Trust: 0.6
title:	Multiple NETGEAR Product Buffer Error Vulnerability Fix	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=117016	Trust: 0.6

sources: CNVD: CNVD-2020-25838 // JVNDB: JVNDB-2017-014973 // CNNVD: CNNVD-202004-2091

EXTERNAL IDS

db:	NVD	id:	CVE-2017-18730	Trust: 3.1
db:	JVNDB	id:	JVNDB-2017-014973	Trust: 0.8
db:	CNVD	id:	CNVD-2020-25838	Trust: 0.6
db:	CNNVD	id:	CNNVD-202004-2091	Trust: 0.6
db:	VULMON	id:	CVE-2017-18730	Trust: 0.1

sources: CNVD: CNVD-2020-25838 // VULMON: CVE-2017-18730 // JVNDB: JVNDB-2017-014973 // CNNVD: CNNVD-202004-2091 // NVD: CVE-2017-18730

REFERENCES

url:	https://kb.netgear.com/000051525/security-advisory-for-pre-authentication-stack-overflow-on-some-routers-and-gateways-psv-2017-2134	Trust: 1.7
url:	https://nvd.nist.gov/vuln/detail/cve-2017-18730	Trust: 1.4
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-18730	Trust: 0.8
url:	https://cwe.mitre.org/data/definitions/787.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: VULMON: CVE-2017-18730 // JVNDB: JVNDB-2017-014973 // CNNVD: CNNVD-202004-2091 // NVD: CVE-2017-18730

SOURCES

db:	CNVD	id:	CNVD-2020-25838
db:	VULMON	id:	CVE-2017-18730
db:	JVNDB	id:	JVNDB-2017-014973
db:	CNNVD	id:	CNNVD-202004-2091
db:	NVD	id:	CVE-2017-18730

LAST UPDATE DATE

2024-11-23T23:07:58.655000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2020-25838	date:	2020-04-30T00:00:00
db:	VULMON	id:	CVE-2017-18730	date:	2020-04-30T00:00:00
db:	JVNDB	id:	JVNDB-2017-014973	date:	2020-05-26T00:00:00
db:	CNNVD	id:	CNNVD-202004-2091	date:	2020-05-06T00:00:00
db:	NVD	id:	CVE-2017-18730	date:	2024-11-21T03:20:46.463

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2020-25838	date:	2020-04-30T00:00:00
db:	VULMON	id:	CVE-2017-18730	date:	2020-04-24T00:00:00
db:	JVNDB	id:	JVNDB-2017-014973	date:	2020-05-26T00:00:00
db:	CNNVD	id:	CNNVD-202004-2091	date:	2020-04-24T00:00:00
db:	NVD	id:	CVE-2017-18730	date:	2020-04-24T13:15:11.563