CVE-2019-17372: NETGEAR AC1450 Firmware

High severity, CVSS 8.1. EPSS: 1.7% chance of exploitation in the next 30 days.

Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi. The attacker can then, for example, visit MNU_accessPassword_recovered.html to obtain a valid new admin password. This affects AC1450, D8500, DC112A, JNDR3000, LG2200D, R4500, R6200, R6200V2, R6250, R6300, R6300v2, R6400, R6700, R6900P, R6900, R7000P, R7000, R7100LG, R7300, R7900, R8000, R8300, R8500, WGR614v10, WN2500RPv2, WNDR3400v2, WNDR3700v3, WNDR4000, WNDR4500, WNDR4500v2, WNR1000, WNR1000v3, WNR3500L, and WNR3500L.

Affected products

  • NETGEAR AC1450 Firmware: affected versions not specified
  • NETGEAR d8500 Firmware: affected versions not specified
  • NETGEAR DC112A Firmware: affected versions not specified
  • NETGEAR JNDR3000 Firmware: affected versions not specified
  • NETGEAR LG2200D Firmware: affected versions not specified
  • NETGEAR r4500 Firmware: affected versions not specified
  • NETGEAR r6200 Firmware: affected versions not specified
  • NETGEAR r6200v2 Firmware: affected versions not specified
  • NETGEAR r6250 Firmware: affected versions not specified
  • NETGEAR r6300 Firmware: affected versions not specified
  • NETGEAR r6300v2 Firmware: affected versions not specified
  • NETGEAR r6400 Firmware: affected versions not specified
  • NETGEAR r6700 Firmware: affected versions not specified
  • NETGEAR r6900 Firmware: affected versions not specified
  • NETGEAR r6900p Firmware: affected versions not specified
  • NETGEAR r7000 Firmware: affected versions not specified
  • NETGEAR r7000p Firmware: affected versions not specified
  • NETGEAR r7100lg Firmware: affected versions not specified
  • NETGEAR r7300 Firmware: affected versions not specified
  • NETGEAR r7900 Firmware: affected versions not specified
  • NETGEAR r8000 Firmware: affected versions not specified
  • NETGEAR r8300 Firmware: affected versions not specified
  • NETGEAR r8500 Firmware: affected versions not specified
  • NETGEAR WGR614V10 Firmware: affected versions not specified
  • NETGEAR WN2500RPV2 Firmware: affected versions not specified
  • and 8 more

Published 2019-10-09. Last modified 2026-06-17.