CVE-2017-18754

—

CVSS 3.1

6.8 medium

EPSS

<1%p56

Published

Apr 22, 2020 (Apr 22, 2020)

Modified

Jun 17, 2026

Description

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WNDR3700v4 before 1.0.2.88, WNDR4300v1 before 1.0.2.90, and WNR2000v5 before 1.0.0.58.

Vendors: netgear
Products: wndr3700 firmware, wndr4300 firmware, wnr2000 firmware
Weakness: CWE-74
Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.