CVE-2018-21161

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-04-23 · updated 2026-06-17

Description

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.34, R7800 before 1.0.2.46, and R9000 before 1.0.3.16.

Affected products

NETGEAR D7800 Firmware: before 1.0.1.34 — fixed in 1.0.1.34
NETGEAR R7800 Firmware: before 1.0.2.46 — fixed in 1.0.2.46
NETGEAR R9000 Firmware: before 1.0.3.16 — fixed in 1.0.3.16

How to fix

Upgrade to a fixed version: NETGEAR D7800 Firmware 1.0.1.34; NETGEAR R7800 Firmware 1.0.2.46; NETGEAR R9000 Firmware 1.0.3.16. Check the vendor advisory for mitigations.

References

https://kb.netgear.com/000059469/Security-Advisory-for-Security-Misconfiguration-on-Some-Gateways-and-Routers-PSV-2017-0429
https://kb.netgear.com/000059469/Security-Advisory-for-Security-Misconfiguration-on-Some-Gateways-and-Routers-PSV-2017-0429

Get alerted when CVE-2018-21161 or the next vulnerability affects your stack