CVE-2017-18378

Medium PUBLISHED

In NETGEAR ReadyNAS Surveillance before 1.4.3-17 x86 and before 1.1.4-7 ARM, $_GET['uploaddir'] is not escaped and is passed to system() through...

NETGEAR · ReadyNAS Surveillance

Not yet in CISA KEV

Exploited in the wild

Recommended Action

Treat as actively exploited. Assess exposure, apply compensating controls where patching is delayed, and monitor for abuse.

Confidence
Medium
Exploitation Status
Exploited in the wild
Observed in Sensors
No
Attempts (30d)
Unique Attacker IPs
CISA KEV
Not yet in CISA KEV
CVSS / EPSS
8.4 High

At a Glance

In NETGEAR ReadyNAS Surveillance before 1.4.3-17 x86 and before 1.1.4-7 ARM, $_GET['uploaddir'] is not escaped and is passed to system() through $tmp_upload_dir, leading to upgrade_handle.php?cmd=writeuploaddir remote command execution.

Published
Jun 11, 2019
First Seen
Jun 04, 2025
CVSS
8.4 High
EPSS
Low complexity No user interaction Unauthenticated

Recommended Actions

  • Treat as actively exploited. Assess exposure, apply compensating controls where patching is delayed, and monitor for abuse.
  • Use the Pro API to automate enrichment, telemetry, and workflow delivery for VM, SOC, and CTI pipelines.