What’s Vulnerable › Vulnerabilities

CVE-2019-17372

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-10-09 · updated 2026-06-17
• Weakness: CWE-287

Description

Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi. The attacker can then, for example, visit MNU_accessPassword_recovered.html to obtain a valid new admin password. This affects AC1450, D8500, DC112A, JNDR3000, LG2200D, R4500, R6200, R6200V2, R6250, R6300, R6300v2, R6400, R6700, R6900P, R6900, R7000P, R7000, R7100LG, R7300, R7900, R8000, R8300, R8500, WGR614v10, WN2500RPv2, WNDR3400v2, WNDR3700v3, WNDR4000, WNDR4500, WNDR4500v2, WNR1000, WNR1000v3, WNR3500L, and WNR3500L.

Affected products

• NETGEAR Ac1450 Firmware: all versions
• NETGEAR D8500 Firmware: all versions
• NETGEAR Dc112A Firmware: all versions
• NETGEAR Jndr3000 Firmware: all versions
• NETGEAR Lg2200D Firmware: all versions
• NETGEAR R4500 Firmware: all versions
• NETGEAR R6200 Firmware: all versions
• NETGEAR R6200V2 Firmware: all versions
• NETGEAR R6250 Firmware: all versions
• NETGEAR R6300 Firmware: all versions
• NETGEAR R6300V2 Firmware: all versions
• NETGEAR R6400 Firmware: all versions
• NETGEAR R6700: all versions
• NETGEAR R6900 Firmware: all versions
• NETGEAR R6900P Firmware: all versions
• NETGEAR R7000: all versions
• NETGEAR R7000P: all versions
• NETGEAR R7100Lg Firmware: all versions
• NETGEAR R7300 Firmware: all versions
• NETGEAR R7900 Firmware: all versions
• NETGEAR R8000 Firmware: all versions
• NETGEAR R8300 Firmware: all versions
• NETGEAR R8500 Firmware: all versions
• NETGEAR Wgr614V10 Firmware: all versions
• NETGEAR Wn2500Rpv2 Firmware: all versions
• NETGEAR Wndr3400V2 Firmware: all versions
• NETGEAR Wndr3700V3 Firmware: all versions
• NETGEAR Wndr4000 Firmware: all versions
• Netgear WNDR4500: all versions
• NETGEAR Wndr4500V2 Firmware: all versions

References

• https://github.com/zer0yu/CVE_Request/blob/master/netgear/netgear_cgi_unauthorized_access_vulnerability.md
• https://github.com/zer0yu/CVE_Request/blob/master/netgear/netgear_cgi_unauthorized_access_vulnerability.md

Get alerted when CVE-2019-17372 or the next vulnerability affects your stack