CVE-2018-21169

mediumpriority · track · 35EPSS 0.006 · 50 %ileEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.63% (50th) EPSS

CVSS 5.8 · medium

Is it mine?

32 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · nvd

EPSS · scored 2026-10-27

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7000 before 2018-03-01, D7800 before 1.0.1.31, D8500 before 1.0.3.36, JNR1010v2 before 1.1.0.46, JR6150 before 1.0.1.14, JWNR2010v5 before 1.1.0.46, PR2000 before 2018-03-01, R6050 before 1.0.1.14, R6220 before 1.1.0.60, R6400 before 1.1.0.26, R6400v2 before 1.0.2.46, R6700v2 before 1.2.0.2, R6800 before 1.2.0.2, R6900v2 before 1.2.0.2, R7300DST before 1.0.0.56, R7500 before 1.0.0.112, R7500v2 before 1.0.3.24, R7800 before 1.0.2.36, R7900P before 1.1.4.6, R8000P before 1.1.4.6, R8300 before 1.0.2.104, R8500 before 1.0.2.104, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.94, WNDR3700v5 before 1.1.0.50, WNDR4300 before 1.0.2.96, WNDR4300v2 before 1.0.0.52, WNDR4500v3 before 1.0.0.52, WNR1000v4 before 1.1.0.46, WNR2020 before 1.1.0.46, and WNR2050 before 1.1.0.46.

cvss

Technical severity, 0–10. One row per scoring source.

8.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.8–8.8

v2.05.8mediumAV:A/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 6.5 · impact 6.4

v3.18.8highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 2.8 · impact 5.9

v3.08.8highCVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:U/UI:Nsecondary · ENISA EU

v3.08.8highCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · cve@mitre.org USexploitability 2.8 · impact 5.9

v3.18.1highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

No weakness (CWE) mapping recorded.

affected products (32)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
netgear d7000 firmware< 2018-03-01nvdUScpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*
netgear d7800 firmware< 1.0.1.31nvdUScpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*
netgear d8500 firmware< 1.0.3.36nvdUScpe:2.3:o:netgear:d8500_firmware:*:*:*:*:*:*:*:*
netgear jnr1010 firmware< 1.1.0.46nvdUScpe:2.3:o:netgear:jnr1010_firmware:*:*:*:*:*:*:*:*
netgear jr6150 firmware< 1.0.1.14nvdUScpe:2.3:o:netgear:jr6150_firmware:*:*:*:*:*:*:*:*
netgear jwnr2010 firmware< 1.1.0.46nvdUScpe:2.3:o:netgear:jwnr2010_firmware:*:*:*:*:*:*:*:*
netgear pr2000 firmware< 2018-03-01nvdUScpe:2.3:o:netgear:pr2000_firmware:*:*:*:*:*:*:*:*
netgear r6050 firmware< 1.0.1.14nvdUScpe:2.3:o:netgear:r6050_firmware:*:*:*:*:*:*:*:*
netgear r6220 firmware< 1.1.0.60nvdUScpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*
netgear r6400 firmware< 1.0.2.46nvdUScpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*
netgear r6400 firmware< 1.1.0.26nvdUScpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*
netgear r6700 firmware< 1.2.0.2nvdUScpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*
netgear r6800 firmware< 1.2.0.2nvdUScpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*
netgear r6900 firmware< 1.2.0.2nvdUScpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*
netgear r7300dst firmware< 1.0.0.56nvdUScpe:2.3:o:netgear:r7300dst_firmware:*:*:*:*:*:*:*:*
netgear r7500 firmware< 1.0.0.112nvdUScpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*
netgear r7500 firmware< 1.0.3.24nvdUScpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*
netgear r7800 firmware< 1.0.2.36nvdUScpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*
netgear r7900p firmware< 1.1.4.6nvdUScpe:2.3:o:netgear:r7900p_firmware:*:*:*:*:*:*:*:*

showing 20 of 32

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd NVD CVE.org

published 2020-04-27modified 2026-06-17

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan