CVE-2017-18853: NETGEAR d8500 Firmware

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Certain NETGEAR devices are affected by password recovery and file access. This affects D8500 1.0.3.27 and earlier, DGN2200v4 1.0.0.82 and earlier, R6300v2 1.0.4.06 and earlier, R6400 1.0.1.20 and earlier, R6400v2 1.0.2.18 and earlier, R6700 1.0.1.22 and earlier, R6900 1.0.1.20 and earlier, R7000 1.0.7.10 and earlier, R7000P 1.0.0.58 and earlier, R7100LG 1.0.0.28 and earlier, R7300DST 1.0.0.52 and earlier, R7900 1.0.1.12 and earlier, R8000 1.0.3.46 and earlier, R8300 1.0.2.86 and earlier, R8500 1.0.2.86 and earlier, WNDR3400v3 1.0.1.8 and earlier, and WNDR4500v2 1.0.0.62 and earlier.

Affected products

• NETGEAR d8500 Firmware: up to and including 1.0.3.27
• NETGEAR DGN2200 Firmware: up to and including 1.0.0.82
• NETGEAR r6300 Firmware: up to and including 1.0.4.06
• NETGEAR r6400 Firmware: up to and including 1.0.1.20; up to and including 1.0.2.18
• NETGEAR r6700 Firmware: up to and including 1.0.1.22
• NETGEAR r6900 Firmware: up to and including 1.0.1.20
• NETGEAR r7000 Firmware: up to and including 1.0.7.10
• NETGEAR r7000p Firmware: up to and including 1.0.0.58
• NETGEAR r7100lg Firmware: up to and including 1.0.0.28
• NETGEAR r7300dst Firmware: up to and including 1.0.0.52
• NETGEAR r7900 Firmware: up to and including 1.0.1.12
• NETGEAR r8000 Firmware: up to and including 1.0.3.46
• NETGEAR r8300 Firmware: up to and including 1.0.2.86
• NETGEAR r8500 Firmware: up to and including 1.0.2.86
• NETGEAR WNDR3400 Firmware: up to and including 1.0.1.8
• NETGEAR WNDR4500 Firmware: up to and including 1.0.0.62

Published 2020-04-29. Last modified 2026-06-17.