Medium severity6.7NVD Advisory· Published Apr 20, 2020· Updated Jun 17, 2026

CVE-2017-18851

Description

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D8500 through 1.0.3.28, R6400 through 1.0.1.22, R6400v2 through 1.0.2.18, R8300 through 1.0.2.94, R8500 through 1.0.2.94, and R6100 through 1.0.1.12.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netgear/D8500 Firmware
cpe:2.3:o:netgear:d8500_firmware:*:*:*:*:*:*:*:*
Range: <1.0.3.28
Netgear/R6100 Firmware
cpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:*
Range: <1.0.1.12
Netgear/R6400 Firmware
cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*
Range: <1.0.1.22
Netgear/R8300 Firmware
cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*
Range: <1.0.2.94
Netgear/R8500 Firmware
cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*
Range: <1.0.2.94
NETGEAR/D8500description
Netgear/R6400llm-fuzzy
Range: <=1.0.1.22
Netgear/D8500llm-fuzzy
Range: <=1.0.3.28
Netgear/R6100llm-fuzzy
Range: <=1.0.1.12
Netgear/R8300llm-fuzzy
Range: <=1.0.2.94
Netgear/R8500llm-fuzzy
Range: <=1.0.2.94
Netgear/R6400v2llm-fuzzy
Range: <=1.0.2.18

Patches

Vulnerability mechanics

References

kb.netgear.com/000045850/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-Modem-Routers-PSV-2017-1207nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.436
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000