Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2019-17372 Details

Description

Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi. The attacker can then, for example, visit MNU_accessPassword_recovered.html to obtain a valid new admin password. This affects AC1450, D8500, DC112A, JNDR3000, LG2200D, R4500, R6200, R6200V2, R6250, R6300, R6300v2, R6400, R6700, R6900P, R6900, R7000P, R7000, R7100LG, R7300, R7900, R8000, R8300, R8500, WGR614v10, WN2500RPv2, WNDR3400v2, WNDR3700v3, WNDR4000, WNDR4500, WNDR4500v2, WNR1000, WNR1000v3, WNR3500L, and WNR3500L.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:8.1 HIGHVector:CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://github.com/zer0yu/CVE_Request/blob/master/netgear/netgear_cgi_unauthorized_access_vulnerability.md	CVE	ExploitThird Party Advisory
https://github.com/zer0yu/CVE_Request/blob/master/netgear/netgear_cgi_unauthorized_access_vulnerability.md	[email protected]	ExploitThird Party Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-287	Improper Authentication	[email protected]

Affected Products

Product	Versions
netgear ac1450 firmware	All versions
CPE cpe:2.3:o:netgear:ac1450_firmware:-:::::::* Remediation No remediation found in references.
netgear ac1450	All versions
CPE cpe:2.3:h:netgear:ac1450:-:::::::* Remediation No remediation found in references.
netgear d8500 firmware	All versions
CPE cpe:2.3:o:netgear:d8500_firmware:-:::::::* Remediation No remediation found in references.
netgear d8500	All versions
CPE cpe:2.3:h:netgear:d8500:-:::::::* Remediation No remediation found in references.
netgear dc112a firmware	All versions
CPE cpe:2.3:o:netgear:dc112a_firmware:-:::::::* Remediation No remediation found in references.
netgear dc112a	All versions
CPE cpe:2.3:h:netgear:dc112a:-:::::::* Remediation No remediation found in references.
netgear jndr3000 firmware	All versions
CPE cpe:2.3:o:netgear:jndr3000_firmware:-:::::::* Remediation No remediation found in references.
netgear jndr3000	All versions
CPE cpe:2.3:h:netgear:jndr3000:-:::::::* Remediation No remediation found in references.
netgear lg2200d firmware	All versions
CPE cpe:2.3:o:netgear:lg2200d_firmware:-:::::::* Remediation No remediation found in references.
netgear lg2200d	All versions
CPE cpe:2.3:h:netgear:lg2200d:-:::::::* Remediation No remediation found in references.
netgear r4500 firmware	All versions
CPE cpe:2.3:o:netgear:r4500_firmware:-:::::::* Remediation No remediation found in references.
netgear r4500	All versions
CPE cpe:2.3:h:netgear:r4500:-:::::::* Remediation No remediation found in references.
netgear r6200 firmware	All versions
CPE cpe:2.3:o:netgear:r6200_firmware:-:::::::* Remediation No remediation found in references.
netgear r6200	All versions
CPE cpe:2.3:h:netgear:r6200:-:::::::* Remediation No remediation found in references.
netgear r6200v2 firmware	All versions
CPE cpe:2.3:o:netgear:r6200v2_firmware:-:::::::* Remediation No remediation found in references.
netgear r6200v2	All versions
CPE cpe:2.3:h:netgear:r6200v2:-:::::::* Remediation No remediation found in references.
netgear r6250 firmware	All versions
CPE cpe:2.3:o:netgear:r6250_firmware:-:::::::* Remediation No remediation found in references.
netgear r6250	All versions
CPE cpe:2.3:h:netgear:r6250:-:::::::* Remediation No remediation found in references.
netgear r6300 firmware	All versions
CPE cpe:2.3:o:netgear:r6300_firmware:-:::::::* Remediation No remediation found in references.
netgear r6300	All versions
CPE cpe:2.3:h:netgear:r6300:-:::::::* Remediation No remediation found in references.
netgear r6300v2 firmware	All versions
CPE cpe:2.3:o:netgear:r6300v2_firmware:-:::::::* Remediation No remediation found in references.
netgear r6300v2	All versions
CPE cpe:2.3:h:netgear:r6300v2:-:::::::* Remediation No remediation found in references.
netgear r6400 firmware	All versions
CPE cpe:2.3:o:netgear:r6400_firmware:-:::::::* Remediation No remediation found in references.
netgear r6400	All versions
CPE cpe:2.3:h:netgear:r6400:-:::::::* Remediation No remediation found in references.
netgear r6700 firmware	All versions
CPE cpe:2.3:o:netgear:r6700_firmware:-:::::::* Remediation No remediation found in references.
netgear r6700	All versions
CPE cpe:2.3:h:netgear:r6700:-:::::::* Remediation No remediation found in references.
netgear r6900p firmware	All versions
CPE cpe:2.3:o:netgear:r6900p_firmware:-:::::::* Remediation No remediation found in references.
netgear r6900p	All versions
CPE cpe:2.3:h:netgear:r6900p:-:::::::* Remediation No remediation found in references.
netgear r6900 firmware	All versions
CPE cpe:2.3:o:netgear:r6900_firmware:-:::::::* Remediation No remediation found in references.
netgear r6900	All versions
CPE cpe:2.3:h:netgear:r6900:-:::::::* Remediation No remediation found in references.
netgear r7000p firmware	All versions
CPE cpe:2.3:o:netgear:r7000p_firmware:-:::::::* Remediation No remediation found in references.
netgear r7000p	All versions
CPE cpe:2.3:h:netgear:r7000p:-:::::::* Remediation No remediation found in references.
netgear r7000 firmware	All versions
CPE cpe:2.3:o:netgear:r7000_firmware:-:::::::* Remediation No remediation found in references.
netgear r7000	All versions
CPE cpe:2.3:h:netgear:r7000:-:::::::* Remediation No remediation found in references.
netgear r7100lg firmware	All versions
CPE cpe:2.3:o:netgear:r7100lg_firmware:-:::::::* Remediation No remediation found in references.
netgear r7100lg	All versions
CPE cpe:2.3:h:netgear:r7100lg:-:::::::* Remediation No remediation found in references.
netgear r7300 firmware	All versions
CPE cpe:2.3:o:netgear:r7300_firmware:-:::::::* Remediation No remediation found in references.
netgear r7300	All versions
CPE cpe:2.3:h:netgear:r7300:-:::::::* Remediation No remediation found in references.
netgear r7900 firmware	All versions
CPE cpe:2.3:o:netgear:r7900_firmware:-:::::::* Remediation No remediation found in references.
netgear r7900	All versions
CPE cpe:2.3:h:netgear:r7900:-:::::::* Remediation No remediation found in references.
netgear r8000 firmware	All versions
CPE cpe:2.3:o:netgear:r8000_firmware:-:::::::* Remediation No remediation found in references.
netgear r8000	All versions
CPE cpe:2.3:h:netgear:r8000:-:::::::* Remediation No remediation found in references.
netgear r8300 firmware	All versions
CPE cpe:2.3:o:netgear:r8300_firmware:-:::::::* Remediation No remediation found in references.
netgear r8300	All versions
CPE cpe:2.3:h:netgear:r8300:-:::::::* Remediation No remediation found in references.
netgear r8500 firmware	All versions
CPE cpe:2.3:o:netgear:r8500_firmware:-:::::::* Remediation No remediation found in references.
netgear r8500	All versions
CPE cpe:2.3:h:netgear:r8500:-:::::::* Remediation No remediation found in references.
netgear wgr614v10 firmware	All versions
CPE cpe:2.3:o:netgear:wgr614v10_firmware:-:::::::* Remediation No remediation found in references.
netgear wgr614v10	All versions
CPE cpe:2.3:h:netgear:wgr614v10:-:::::::* Remediation No remediation found in references.
netgear wn2500rpv2 firmware	All versions
CPE cpe:2.3:o:netgear:wn2500rpv2_firmware:-:::::::* Remediation No remediation found in references.
netgear wn2500rpv2	All versions
CPE cpe:2.3:h:netgear:wn2500rpv2:-:::::::* Remediation No remediation found in references.
netgear wndr3400v2 firmware	All versions
CPE cpe:2.3:o:netgear:wndr3400v2_firmware:-:::::::* Remediation No remediation found in references.
netgear wndr3400v2	All versions
CPE cpe:2.3:h:netgear:wndr3400v2:-:::::::* Remediation No remediation found in references.
netgear wndr3700v3 firmware	All versions
CPE cpe:2.3:o:netgear:wndr3700v3_firmware:-:::::::* Remediation No remediation found in references.
netgear wndr3700v3	All versions
CPE cpe:2.3:h:netgear:wndr3700v3:-:::::::* Remediation No remediation found in references.
netgear wndr4000 firmware	All versions
CPE cpe:2.3:o:netgear:wndr4000_firmware:-:::::::* Remediation No remediation found in references.
netgear wndr4000	All versions
CPE cpe:2.3:h:netgear:wndr4000:-:::::::* Remediation No remediation found in references.
netgear wndr4500 firmware	All versions
CPE cpe:2.3:o:netgear:wndr4500_firmware:-:::::::* Remediation No remediation found in references.
netgear wndr4500	All versions
CPE cpe:2.3:h:netgear:wndr4500:-:::::::* Remediation No remediation found in references.
netgear wndr4500v2 firmware	All versions
CPE cpe:2.3:o:netgear:wndr4500v2_firmware:-:::::::* Remediation No remediation found in references.
netgear wndr4500v2	All versions
CPE cpe:2.3:h:netgear:wndr4500v2:-:::::::* Remediation No remediation found in references.
netgear wnr1000 firmware	All versions
CPE cpe:2.3:o:netgear:wnr1000_firmware:-:::::::* Remediation No remediation found in references.
netgear wnr1000	All versions
CPE cpe:2.3:h:netgear:wnr1000:-:::::::* Remediation No remediation found in references.
netgear wnr1000v3 firmware	All versions
CPE cpe:2.3:o:netgear:wnr1000v3_firmware:-:::::::* Remediation No remediation found in references.
netgear wnr1000v3	All versions
CPE cpe:2.3:h:netgear:wnr1000v3:-:::::::* Remediation No remediation found in references.
netgear wnr3500l firmware	All versions
CPE cpe:2.3:o:netgear:wnr3500l_firmware:-:::::::* Remediation No remediation found in references.
netgear wnr3500l	All versions
CPE cpe:2.3:h:netgear:wnr3500l:-:::::::* Remediation No remediation found in references.

Change History

4 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Oct 18, 2019	Initial Analysis	[email protected]

CVE-2019-17372 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation