CVE-2017-18780

Vulnerability

A denial of service vulnerability exists in affected NETGEAR devices. The issue impacts the following products running firmware versions before the listed fixed versions: D6200 (before 1.1.00.24), D7000 (before 1.0.1.52), JNR1010v2 (before 1.1.0.44), JR6150 (before 1.0.1.12), JWNR2010v5 (before 1.1.0.44), PR2000 (before 1.0.0.20), R6020 (before 1.0.0.26), R6050 (before 1.0.1.12), R6080 (before 1.0.0.26), R6120 (before 1.0.0.36), R6220 (before 1.1.0.60), R6700v2 (before 1.2.0.12), R6800 (before 1.2.0.12), R6900v2 (before 1.2.0.12), WNDR3700v5 (before 1.1.0.50), WNR1000v4 (before 1.1.0.44), WNR2020 (before 1.1.0.44), and WNR2050 (before 1.1.0.44). [1]

Exploitation

Access to the vulnerable functionality may be triggered remotely; the specific attack vector and required privileges are not disclosed in the available references. An attacker could potentially exploit this vulnerability without authentication. [1]

Impact

Successful exploitation leads to a denial of service condition on the affected device, rendering network services unavailable until a reboot. The compromise is limited to availability impact without loss of confidentiality or integrity. [1]

Mitigation

NETGEAR has released fixed firmware versions for all affected models as listed above. Users should upgrade to the latest firmware by visiting the NETGEAR support site and following the instructions for their specific device model. [1]