CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-17372

Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi. The attacker can then, for example, visit MNU_accessPassword_recovered.html to obtain a valid new admin password. This affects AC1450, D8500, DC112A, JNDR3000, LG2200D, R4500, R6200, R6200V2, R6250, R6300, R6300v2, R6400, R6700, R6900P, R6900, R7000P, R7000, R7100LG, R7300, R7900, R8000, R8300, R8500, WGR614v10, WN2500RPv2, WNDR3400v2, WNDR3700v3, WNDR4000, WNDR4500, WNDR4500v2, WNR1000, WNR1000v3, WNR3500L, and WNR3500L.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 65.4%

CVSS Severity

CVSS v3 Score 8.1

CVSS v2 Score 4.3

References

Products affected by CVE-2019-17372

Netgear » Ac1450 » Version: N/A

cpe:2.3:h:netgear:ac1450:-
Netgear » D8500 » Version: N/A

cpe:2.3:h:netgear:d8500:-
Netgear » Dc112a » Version: N/A

cpe:2.3:h:netgear:dc112a:-
Netgear » Jndr3000 » Version: N/A

cpe:2.3:h:netgear:jndr3000:-
Netgear » Lg2200d » Version: N/A

cpe:2.3:h:netgear:lg2200d:-
Netgear » R4500 » Version: N/A

cpe:2.3:h:netgear:r4500:-
Netgear » R6200 » Version: N/A

cpe:2.3:h:netgear:r6200:-
Netgear » R6200v2 » Version: N/A

cpe:2.3:h:netgear:r6200v2:-
Netgear » R6250 » Version: N/A

cpe:2.3:h:netgear:r6250:-
Netgear » R6300 » Version: N/A

cpe:2.3:h:netgear:r6300:-
Netgear » R6300v2 » Version: N/A

cpe:2.3:h:netgear:r6300v2:-
Netgear » R6400 » Version: N/A

cpe:2.3:h:netgear:r6400:-
Netgear » R6700 » Version: N/A

cpe:2.3:h:netgear:r6700:-
Netgear » R6900 » Version: N/A

cpe:2.3:h:netgear:r6900:-
Netgear » R6900p » Version: N/A

cpe:2.3:h:netgear:r6900p:-
Netgear » R7000 » Version: N/A

cpe:2.3:h:netgear:r7000:-
Netgear » R7000p » Version: N/A

cpe:2.3:h:netgear:r7000p:-
Netgear » R7100lg » Version: N/A

cpe:2.3:h:netgear:r7100lg:-
Netgear » R7300 » Version: N/A

cpe:2.3:h:netgear:r7300:-
Netgear » R7900 » Version: N/A

cpe:2.3:h:netgear:r7900:-
Netgear » R8000 » Version: N/A

cpe:2.3:h:netgear:r8000:-
Netgear » R8300 » Version: N/A

cpe:2.3:h:netgear:r8300:-
Netgear » R8500 » Version: N/A

cpe:2.3:h:netgear:r8500:-
Netgear » Wgr614v10 » Version: N/A

cpe:2.3:h:netgear:wgr614v10:-
Netgear » Wn2500rpv2 » Version: N/A

cpe:2.3:h:netgear:wn2500rpv2:-
Netgear » Wndr3400v2 » Version: N/A

cpe:2.3:h:netgear:wndr3400v2:-
Netgear » Wndr3700v3 » Version: N/A

cpe:2.3:h:netgear:wndr3700v3:-
Netgear » Wndr4000 » Version: N/A

cpe:2.3:h:netgear:wndr4000:-
Netgear » Wndr4500 » Version: N/A

cpe:2.3:h:netgear:wndr4500:-
Netgear » Wndr4500v2 » Version: N/A

cpe:2.3:h:netgear:wndr4500v2:-
Netgear » Wnr1000 » Version: N/A

cpe:2.3:h:netgear:wnr1000:-
Netgear » Wnr1000v3 » Version: N/A

cpe:2.3:h:netgear:wnr1000v3:-
Netgear » Wnr3500l » Version: N/A

cpe:2.3:h:netgear:wnr3500l:-
Netgear » Ac1450 Firmware » Version: N/A

cpe:2.3:o:netgear:ac1450_firmware:-
Netgear » D8500 Firmware » Version: N/A

cpe:2.3:o:netgear:d8500_firmware:-
Netgear » Dc112a Firmware » Version: N/A

cpe:2.3:o:netgear:dc112a_firmware:-
Netgear » Jndr3000 Firmware » Version: N/A

cpe:2.3:o:netgear:jndr3000_firmware:-
Netgear » Lg2200d Firmware » Version: N/A

cpe:2.3:o:netgear:lg2200d_firmware:-
Netgear » R4500 Firmware » Version: N/A

cpe:2.3:o:netgear:r4500_firmware:-
Netgear » R6200 Firmware » Version: N/A

cpe:2.3:o:netgear:r6200_firmware:-
Netgear » R6200v2 Firmware » Version: N/A

cpe:2.3:o:netgear:r6200v2_firmware:-
Netgear » R6250 Firmware » Version: N/A

cpe:2.3:o:netgear:r6250_firmware:-
Netgear » R6300 Firmware » Version: N/A

cpe:2.3:o:netgear:r6300_firmware:-
Netgear » R6300v2 Firmware » Version: N/A

cpe:2.3:o:netgear:r6300v2_firmware:-
Netgear » R6400 Firmware » Version: N/A

cpe:2.3:o:netgear:r6400_firmware:-
Netgear » R6700 Firmware » Version: N/A

cpe:2.3:o:netgear:r6700_firmware:-
Netgear » R6900 Firmware » Version: N/A

cpe:2.3:o:netgear:r6900_firmware:-
Netgear » R6900p Firmware » Version: N/A

cpe:2.3:o:netgear:r6900p_firmware:-
Netgear » R7000 Firmware » Version: N/A

cpe:2.3:o:netgear:r7000_firmware:-
Netgear » R7000p Firmware » Version: N/A

cpe:2.3:o:netgear:r7000p_firmware:-
Netgear » R7100lg Firmware » Version: N/A

cpe:2.3:o:netgear:r7100lg_firmware:-
Netgear » R7300 Firmware » Version: N/A

cpe:2.3:o:netgear:r7300_firmware:-
Netgear » R7900 Firmware » Version: N/A

cpe:2.3:o:netgear:r7900_firmware:-
Netgear » R8000 Firmware » Version: N/A

cpe:2.3:o:netgear:r8000_firmware:-
Netgear » R8300 Firmware » Version: N/A

cpe:2.3:o:netgear:r8300_firmware:-
Netgear » R8500 Firmware » Version: N/A

cpe:2.3:o:netgear:r8500_firmware:-
Netgear » Wgr614v10 Firmware » Version: N/A

cpe:2.3:o:netgear:wgr614v10_firmware:-
Netgear » Wn2500rpv2 Firmware » Version: N/A

cpe:2.3:o:netgear:wn2500rpv2_firmware:-
Netgear » Wndr3400v2 Firmware » Version: N/A

cpe:2.3:o:netgear:wndr3400v2_firmware:-
Netgear » Wndr3700v3 Firmware » Version: N/A

cpe:2.3:o:netgear:wndr3700v3_firmware:-
Netgear » Wndr4000 Firmware » Version: N/A

cpe:2.3:o:netgear:wndr4000_firmware:-
Netgear » Wndr4500 Firmware » Version: N/A

cpe:2.3:o:netgear:wndr4500_firmware:-
Netgear » Wndr4500v2 Firmware » Version: N/A

cpe:2.3:o:netgear:wndr4500v2_firmware:-
Netgear » Wnr1000 Firmware » Version: N/A

cpe:2.3:o:netgear:wnr1000_firmware:-
Netgear » Wnr1000v3 Firmware » Version: N/A

cpe:2.3:o:netgear:wnr1000v3_firmware:-
Netgear » Wnr3500l Firmware » Version: N/A

cpe:2.3:o:netgear:wnr3500l_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-17372

Products

Pricing

Contact Us