Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2017-18716: Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v...

CVE-2017-18716 · published 6 years ago

Summary

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.

What to do

Update netgear d6200_firmware to version 1.1.00.24 or later.
Update netgear r6700_firmware to version 1.1.0.42 or later.
Update netgear r6800_firmware to version 1.1.0.42 or later.
Update netgear r6900_firmware to version 1.1.0.42 or later.

Affected software

Vendor	Product	Affected versions
netgear	d6200_firmware	< 1.1.00.24 `cpe:2.3:o:netgear:d6200_firmware::::::::`
netgear	r6700_firmware	< 1.1.0.42 `cpe:2.3:o:netgear:r6700_firmware::::::::`
netgear	r6800_firmware	< 1.1.0.42 `cpe:2.3:o:netgear:r6800_firmware::::::::`
netgear	r6900_firmware	< 1.1.0.42 `cpe:2.3:o:netgear:r6900_firmware::::::::`

Original advisory text

References

https://kb.netgear.com/000052281/Security-Advisory-for-Pre-Authentication-Stack-... Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

8.8 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-787Out-of-bounds Write

Timeline

Published24 Apr 2020

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2017-18716 · NVD

Track software like this

Free during beta