CVE-2018-21161

Certain NETGEAR devices are affected by incorrect configuration of security settings

High · published April 23, 2020

CVSS v3.0
8.8
EPSS
1%
Percentile
64.2
In the wild
Unconfirmed
What it is

⚡ A simple misconfiguration puts certain NETGEAR devices at risk! If you’re using models D7800, R7800, or R9000 and haven't updated, time to take action! 🔥 Think of your NETGEAR router like a hotel lobby without a front desk staff—anyone could walk in and access sensitive areas without needing a key or a reservation! It’s critical to ensure your security settings are properly configured to keep intruders out. An attacker could potentially exploit this misconfiguration to gain unauthorized access to sensitive settings on your router, leading to an array of security issues. This might allow them to intercept your network traffic, change configurations, or even take control of connected devices. The consequences could be absolutely devastating for your network security!

Put simply

Think of your NETGEAR router like a hotel lobby without a front desk staff—anyone could walk in and access sensitive areas without needing a key or a reservation! It’s critical to ensure your security settings are properly configured to keep intruders out. This vulnerability arises from an incorrect configuration of security settings in affected NETGEAR devices, allowing unauthorized users to access sensitive device functionalities that should be secured.

What to do

An attacker could potentially exploit this misconfiguration to gain unauthorized access to sensitive settings on your router, leading to an array of security issues. This might allow them to intercept your network traffic, change configurations, or even take control of connected devices. The consequences could be absolutely devastating for your network security! Make sure to update your NETGEAR devices to at least the following versions: D7800 to 1.0.1.34, R7800 to 1.0.2.46, and R9000 to 1.0.3.16. After updating, double-check the security settings to ensure they're configured correctly. Don't leave the door open for attackers! You've got this! By following these steps, you can ensure your NETGEAR devices are secure and ready to keep your network safe! 🛡️

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:R
CVSS v4.0
Not supplied
EPSS
0.01058 · 64.2th percentile
Published
2020-04-23T20:14Z
EPSS history
Timeline
  • 23 APR 20:14Z
    Certain NETGEAR devices are affected by incorrect configuration of security settings
    cvelistv5