CVE-2017-18846: NETGEAR d8500 Firmware

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

Certain NETGEAR devices are affected by a stack-based buffer overflow. This affects R6250 before 1.0.4.12, R6400v2 before 1.0.2.32, R7000P/R6900P before 1.0.0.56, R7900 before 1.0.1.18, R8300 before 1.0.2.100_1.0.82, R8500 before 1.0.2.100_1.0.82, and D8500 before 1.0.3.29.

Affected products

• NETGEAR d8500 Firmware: before 1.0.3.29 (fixed in 1.0.3.29)
• NETGEAR r6250 Firmware: before 1.0.4.12 (fixed in 1.0.4.12)
• NETGEAR r6400 Firmware: before 1.0.2.32 (fixed in 1.0.2.32)
• NETGEAR r6900p Firmware: before 1.0.0.56 (fixed in 1.0.0.56)
• NETGEAR r7000p Firmware: before 1.0.0.56 (fixed in 1.0.0.56)
• NETGEAR r7900 Firmware: before 1.0.1.18 (fixed in 1.0.1.18)
• NETGEAR r8300 Firmware: before 1.0.2.100_1.0.82 (fixed in 1.0.2.100_1.0.82)
• NETGEAR r8500 Firmware: before 1.0.2.100_1.0.82 (fixed in 1.0.2.100_1.0.82)

Published 2020-04-20. Last modified 2026-06-17.