What’s Vulnerable › Vulnerabilities

CVE-2017-18859

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-04-28 · updated 2026-06-17

Description

Certain NETGEAR devices are affected by slowdown/stoppage. This affects C6300 before 2017-05-30, CM400 before 2017-05-30, CM700 before 2017-05-30, and CMD31T before 2017-05-30.

Affected products

• NETGEAR C6300 Firmware: before 2017-05-30 — fixed in 2017-05-30
• NETGEAR Cm400 Firmware: before 2017-05-30 — fixed in 2017-05-30
• NETGEAR Cm700 Firmware: before 2017-05-30 — fixed in 2017-05-30
• NETGEAR Cmd31T Firmware: before 2017-05-30 — fixed in 2017-05-30

How to fix

Upgrade to a fixed version: NETGEAR C6300 Firmware 2017-05-30; NETGEAR Cm400 Firmware 2017-05-30; NETGEAR Cm700 Firmware 2017-05-30; NETGEAR Cmd31T Firmware 2017-05-30. Check the vendor advisory for mitigations.

References

• https://kb.netgear.com/000038560/Security-Advisory-for-Vulnerability-on-Select-Cable-Modems-and-Gateways-PSV-2017-2165
• https://kb.netgear.com/000038560/Security-Advisory-for-Vulnerability-on-Select-Cable-Modems-and-Gateways-PSV-2017-2165

Get alerted when CVE-2017-18859 or the next vulnerability affects your stack