← Vulnerability feed

Vulnerability record · CVE-2017-18732 · published 23 April 2020

CVE-2017-18732: Netgear r6300 firmware improper authentication vulnerability

Netgear · R6300 Firmware

Certain NETGEAR devices are affected by authentication bypass. This affects R6300v2 before 1.0.4.8, PLW1000v2 before 1.0.0.14, and PLW1010v2 before 1.0.0.14.

8.8 CVSS 3.1 High EPSS 0.79% · top 44.6% CWE-287 · Improper authentication
8.8CVSS 3.1 base score, v2 5.8
0.79%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Certain NETGEAR devices are affected by authentication bypass. This affects R6300v2 before 1.0.4.8, PLW1000v2 before 1.0.0.14, and PLW1010v2 before 1.0.0.14.

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://kb.netgear.com/000051523/Security-Advisory-for-Authentication-Bypass-on-R6300v2-PLW1000v2-and-PLW1010v2-PSV-2016 Vendor Advisory
https://kb.netgear.com/000051523/Security-Advisory-for-Authentication-Bypass-on-R6300v2-PLW1000v2-and-PLW1010v2-PSV-2016 Vendor Advisory

Track CVE-2017-18732 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.1CVE-2017-5521NETGEAR router web management password disclosure via recovery tokenMultiple NETGEAR router models expose the admin password through the web management server. When authentication is canceled and password recovery is …KEVEPSS 89%analysed9.8CVE-2018-21162Netgear d6400 firmware os command injection vulnerabilityCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6400 before 1.0.0.78, EX6200 before 1.0.3.86,…EPSS 3.4%9.8CVE-2018-21134Netgear r6700 firmware out-of-bounds write vulnerabilityCertain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects R6700 before 1.0.1.48, R7900 befor…EPSS 1.3%9.8CVE-2019-20730Netgear d3600 firmware sql injection vulnerabilityCertain NETGEAR devices are affected by SQL injection. This affects D3600 before 1.0.0.68, D6000 before 1.0.0.68, D6200 before 1.1.00.28, D6220 befor…EPSS 0.91%8.8CVE-2022-30078Netgear r6200 firmware os command injection vulnerabilityNETGEAR R6200_V2 firmware versions through R6200v2-V1.0.3.12_10.1.11 and R6300_V2 firmware versions through R6300v2-V1.0.4.52_10.0.93 allow remote au…EPSS 1.8%8.8CVE-2021-27239Netgear d6220 firmware stack-based buffer overflow vulnerabilityThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version …EPSS 0.74%8.8CVE-2018-21093Netgear d8500 firmware out-of-bounds write vulnerabilityCertain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D8500 before 1.0.3.42, EX3700 befo…EPSS 0.63%8.8CVE-2017-18744Netgear r6250 firmware classic buffer overflow vulnerabilityCertain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6250 before 1.0.4.12, R6300v2 before 1.0.4.12…EPSS 0.57%

Source: NIST National Vulnerability Database (record CVE-2017-18732), CISA KEV, FIRST EPSS (scores of 2026-10-16). This page is refreshed as NVD updates the record.