Security readout for executives and security teams
Plain-English summary
Some older NETGEAR routers can be knocked offline by an attacker on the same local network segment. The issue affects availability, not data theft or device takeover in the provided sources. Business urgency depends on whether these models still support offices, guest networks, or remote sites.
Executive priority
Treat as a moderate operational risk where affected routers support business connectivity. Prioritize remediation for offices, guest Wi-Fi, and remote sites where downtime would interrupt work or customer access.
Technical view
CVE-2017-18765 is an unauthenticated adjacent-network denial-of-service vulnerability affecting multiple NETGEAR router firmware lines. CVSS 3.0 is 6.5 with high availability impact only. Affected versions are earlier than the fixed firmware listed for R6300v2, R6400, R6400v2, R6700, R6900, WNR3500Lv2, and WNR2000v2.
Likely exposure
Exposure is most likely in small office, home office, branch, or unmanaged networks still using the named NETGEAR routers below fixed firmware levels. The CVSS vector indicates adjacent-network reachability, not internet-wide remote reachability.
Exploitation context
The provided sources do not state active exploitation, and the CVE is not marked KEV. The attack requires adjacent-network access and can cause denial of service. No exploit mechanics are provided in the source bundle.
Researcher notes
The record provides model and firmware thresholds but no CWE, CPEs, root-cause detail, or exploit description. Validation should focus on asset identification, firmware comparison, and adjacent-network exposure rather than exploit reproduction.
Mitigation direction
- Inventory for the named NETGEAR router models and firmware versions.
- Upgrade affected routers to the listed fixed firmware versions or later.
- Check the NETGEAR advisory for current vendor guidance.
- Replace devices that cannot receive supported firmware updates.
- Restrict untrusted access to local and guest network segments.
Validation and detection
- Confirm router model numbers against the CVE description.
- Compare installed firmware with the fixed version thresholds.
- Review network segmentation for adjacent attacker paths.
- Check vendor advisory status before closing remediation.
- Monitor for unexplained router reboots or availability loss.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2017-18765 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 6.5 (3.0)
- Known Exploited
- No
- Published
Vector: CVSS:3.0/AC:L/AV:A/A:H/C:N/I:N/PR:N/S:U/UI:N
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.0/AC:L/AV:A/A:H/C:N/I:N/PR:N/S:U/UI:N2.83.6Primary CVE scoreVulnerability scoring details
Base CVSS 3.0 score
6.5MediumVector: CVSS:3.0/AC:L/AV:A/A:H/C:N/I:N/PR:N/S:U/UI:N
Source materials
- CVE List V5 sourceCVE List V5
- https://kb.netgear.com/000051480/Security-Advisory-for-Denial-of-Service-on-Some-Routers-PSV-2017-0648CVE reference · x_refsource_CONFIRM
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.