CVE-2017-18769

lowpriority · track · 18EPSS 0.003 · 27 %ileEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.34% (27th) EPSS

CVSS 2.1 · low

Is it mine?

43 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · nvd

EPSS · scored 2026-10-27

Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D6220 before 1.0.0.40, D6400 before 1.0.0.74, D7000 before 1.0.1.60, D7800 before 1.0.1.34, D8500 before 1.0.3.39, DGN2200v4 before 1.0.0.94, DGN2200Bv4 before 1.0.0.94, EX6200v2 before 1.0.1.50, EX7000 before 1.0.0.56, JR6150 before 1.0.1.18, R6050 before 1.0.1.10J, R6100 before 1.0.1.16, R6150 before 1.0.1.10, R6220 before 1.1.0.50, R6250 before 1.0.4.12, R6300v2 before 1.0.4.12, R6400 before 1.0.1.24, R6400v2 before 1.0.2.32, R6700 before 1.0.1.26, R6700v2 before 1.2.0.4, R6800 before 1.0.1.10, R6900 before 1.0.1.26, R6900P before 1.0.0.58, R6900v2 before 1.2.0.4, R7000 before 1.0.9.6, R7000P before 1.0.0.58, R7100LG before 1.0.0.32, R7300 before 1.0.0.54, R7500 before 1.0.0.112, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, R7900 before 1.0.1.18, R8000 before 1.0.3.48, R8300 before 1.0.2.104, R8500 before 1.0.2.104, R9000 before 1.0.2.40, WNDR3400v3 before 1.0.1.14, WNDR3700v4 before 1.0.2.96, WNDR4300v1 before 1.0.2.98, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR3500Lv2 before 1.2.0.44.

cvss

Technical severity, 0–10. One row per scoring source.

4.6

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 2.1–4.6

v2.02.1lowAV:L/AC:L/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USexploitability 3.9 · impact 2.9

v3.14.6mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USexploitability 0.9 · impact 3.6

v3.04.6mediumCVSS:3.0/AC:L/AV:P/A:N/C:H/I:N/PR:N/S:U/UI:Nsecondary · ENISA EU

v3.04.6mediumCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · cve@mitre.org USexploitability 0.9 · impact 3.6

v3.14.2mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-200USprimary

affected products (43)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
netgear d6220 firmware< 1.0.0.40nvdUScpe:2.3:o:netgear:d6220_firmware:*:*:*:*:*:*:*:*
netgear d6400 firmware< 1.0.0.74nvdUScpe:2.3:o:netgear:d6400_firmware:*:*:*:*:*:*:*:*
netgear d7000 firmware< 1.0.1.60nvdUScpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*
netgear d7800 firmware< 1.0.1.34nvdUScpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*
netgear d8500 firmware< 1.0.3.39nvdUScpe:2.3:o:netgear:d8500_firmware:*:*:*:*:*:*:*:*
netgear dgn2200 firmware< 1.0.0.94nvdUScpe:2.3:o:netgear:dgn2200_firmware:*:*:*:*:*:*:*:*
netgear dgn2200b firmware< 1.0.0.94nvdUScpe:2.3:o:netgear:dgn2200b_firmware:*:*:*:*:*:*:*:*
netgear ex6200 firmware< 1.0.1.50nvdUScpe:2.3:o:netgear:ex6200_firmware:*:*:*:*:*:*:*:*
netgear ex7000 firmware< 1.0.0.56nvdUScpe:2.3:o:netgear:ex7000_firmware:*:*:*:*:*:*:*:*
netgear jr6150 firmware< 1.0.1.18nvdUScpe:2.3:o:netgear:jr6150_firmware:*:*:*:*:*:*:*:*
netgear r6050 firmware< 1.0.1.10jnvdUScpe:2.3:o:netgear:r6050_firmware:*:*:*:*:*:*:*:*
netgear r6100 firmware< 1.0.1.16nvdUScpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:*
netgear r6150 firmware< 1.0.1.10nvdUScpe:2.3:o:netgear:r6150_firmware:*:*:*:*:*:*:*:*
netgear r6220 firmware< 1.1.0.50nvdUScpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*
netgear r6250 firmware< 1.0.4.12nvdUScpe:2.3:o:netgear:r6250_firmware:*:*:*:*:*:*:*:*
netgear r6300 firmware< 1.0.4.12nvdUScpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:*
netgear r6400 firmware< 1.0.1.24nvdUScpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*
netgear r6400 firmware< 1.0.2.32nvdUScpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*
netgear r6700 firmware< 1.0.1.26nvdUScpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*

showing 20 of 43

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd NVD CVE.org MITRE

published 2020-04-22modified 2026-06-17

related (19,397)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-20133US	high7.5OT critical	31.5% (98th)	KEV	2026-02-25
A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. This vulnerability is due…
CVE-2026-20128US	—OT critical	7.32% (94th)	KEV	2026-02-25
A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affect…
CVE-2026-20122US	medium5.4OT critical	25.8% (98th)	KEV	2026-02-25
A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vul…
CVE-2025-68686US	—OT critical	29.5% (98th)	KEV	2026-02-10
An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.…
CVE-2026-20805US	—OT critical	7.46% (94th)	KEV	2026-01-13
Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.

+19392 more

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan