CVE-2017-18808 : Security Advisory and Response

Devices running NETGEAR ReadyNAS OS 6 and utilizing versions earlier than 6.8.0 are vulnerable to security misconfiguration.

Understanding CVE-2017-18808

Devices running NETGEAR ReadyNAS OS 6 and utilizing ReadyNAS OS versions earlier than 6.8.0 are prone to an issue where security settings are configured incorrectly.

What is CVE-2017-18808?

CVE-2017-18808 is a vulnerability affecting devices running NETGEAR ReadyNAS OS 6 with versions prior to 6.8.0. The vulnerability arises due to incorrect security settings configuration.

The Impact of CVE-2017-18808

The impact of this vulnerability is rated as MEDIUM with a CVSS base score of 4.2. It requires high privileges to exploit and has low impacts on confidentiality, integrity, and availability.

Technical Details of CVE-2017-18808

Vulnerability Description

Devices running NETGEAR ReadyNAS OS 6 with versions earlier than 6.8.0 are affected by a security misconfiguration issue.

Affected Systems and Versions

Product: NETGEAR ReadyNAS OS 6
Versions Affected: Versions earlier than 6.8.0

Exploitation Mechanism

Attack Complexity: Low
Attack Vector: Local
Privileges Required: High
User Interaction: None

Mitigation and Prevention

Immediate Steps to Take

Update to version 6.8.0 or later of ReadyNAS OS.
Review and adjust security settings to ensure correct configuration.

Long-Term Security Practices

Regularly update and patch the system to prevent vulnerabilities.
Implement least privilege access controls to limit the impact of potential security issues.

Patching and Updates

Apply security patches and updates provided by NETGEAR to address the security misconfiguration vulnerability.