CVE-2017-18765

Vulnerability

A denial-of-service (DoS) vulnerability exists in multiple NETGEAR router models. Affected models and the first patched firmware versions are: R6300v2 before 1.0.4.8, R6400 before 1.0.1.22, R6400v2 before 1.0.2.32, R6700 before 1.0.1.20, R6900 before 1.0.1.20, WNR3500Lv2 before 1.2.0.44, and WNR2000v2 before 1.2.0.8 [1]. The specific code path and conditions required to trigger the vulnerability are not publicly detailed.

Exploitation

An attacker on the same network (adjacent access) can exploit this vulnerability without authentication [1]. No user interaction is required. The exact sequence of steps is not disclosed in the available references, but the CVSS vector indicates the attack complexity is low.

Impact

Successful exploitation leads to a denial-of-service condition, causing the affected router to become unresponsive or crash. This impacts the availability of network services for all connected devices [1]. There is no impact to confidentiality or integrity.

Mitigation

NETGEAR released fixed firmware versions for all affected models. Users should update to the following versions or later: R6300v2 to 1.0.4.8, R6400 to 1.0.1.22, R6400v2 to 1.0.2.32, R6700 to 1.0.1.20, R6900 to 1.0.1.20, WNR3500Lv2 to 1.2.0.44, and WNR2000v2 to 1.2.0.8 [1]. No workarounds are mentioned. The vulnerability is not known to be listed on CISA's Known Exploited Vulnerabilities (KEV) catalog.