CVE-2017-18794: NETGEAR d6100 Firmware

High severity, CVSS 8.4. EPSS: 0.8% chance of exploitation in the next 30 days.

Certain NETGEAR devices are affected by command injection. This affects R6300v2 before 1.0.4.8_10.0.77, R6400 before 1.0.1.24, R6700 before 1.0.1.26, R7000 before 1.0.9.10, R7100LG before 1.0.0.32, R7900 before 1.0.1.18, R8000 before 1.0.3.54, R8500 before 1.0.2.100, and D6100 before 1.0.0.50_0.0.50.

Affected products

NETGEAR d6100 Firmware: before 1.0.0.50_0.0.50 (fixed in 1.0.0.50_0.0.50)
NETGEAR r6300 Firmware: before 1.0.4.8_10.0.77 (fixed in 1.0.4.8_10.0.77)
NETGEAR r6400 Firmware: before 1.0.1.24 (fixed in 1.0.1.24)
NETGEAR r6700 Firmware: before 1.0.1.26 (fixed in 1.0.1.26)
NETGEAR r7000 Firmware: before 1.0.9.10 (fixed in 1.0.9.10)
NETGEAR r7100lg Firmware: before 1.0.0.32 (fixed in 1.0.0.32)
NETGEAR r7900 Firmware: before 1.0.1.18 (fixed in 1.0.1.18)
NETGEAR r8000 Firmware: before 1.0.3.54 (fixed in 1.0.3.54)
NETGEAR r8500 Firmware: before 1.0.2.100 (fixed in 1.0.2.100)

Published 2020-04-21. Last modified 2026-06-17.