High severity · published Apr 29, 2020
CVE-2017-18860
Certain NETGEAR devices are affected by debugging command execution
7.7
CVSS
0.5%
EPSS
No
On KEV
Description
Certain NETGEAR devices are affected by debugging command execution. This affects FS752TP 5.4.2.19 and earlier, GS108Tv2 5.4.2.29 and earlier, GS110TP 5.4.2.29 and earlier, GS418TPP 6.6.2.6 and earlier, GS510TLP 6.6.2.6 and earlier, GS510TP 5.04.2.27 and earlier, GS510TPP 6.6.2.6 and earlier, GS716Tv2 5.4.2.27 and earlier, GS716Tv3 6.3.1.16 and earlier, GS724Tv3 5.4.2.27 and earlier, GS724Tv4 6.3.1.16 and earlier, GS728TPSB 5.3.0.29 and earlier, GS728TSB 5.3.0.29 and earlier, GS728TXS 6.1.0.35 and earlier, GS748Tv4 5.4.2.27 and earlier, GS748Tv5 6.3.1.16 and earlier, GS752TPSB 5.3.0.29 and earlier, GS752TSB 5.3.0.29 and earlier, GS752TXS 6.1.0.35 and earlier, M4200 12.0.2.10 and earlier, M4300 12.0.2.10 and earlier, M5300 11.0.0.28 and earlier, M6100 11.0.0.28 and earlier, M7100 11.0.0.28 and earlier, S3300 6.6.1.4 and earlier, XS708T 6.6.0.11 and earlier, XS712T 6.1.0.34 and earlier, and XS716T 6.6.0.11 and earlier.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 46% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FF
Fs752tp Firmware · Netgear
through 5.4.2.19 · source: NVD
GF
Gs108t Firmware · Netgear
through 5.4.2.29 · source: NVD
GF
Gs110tp Firmware · Netgear
through 5.4.2.29 · source: NVD
GF
Gs418tpp Firmware · Netgear
through 6.6.2.6 · source: NVD
GF
Gs510tlp Firmware · Netgear
through 6.6.2.6 · source: NVD
GF
Gs510tp Firmware · Netgear
through 5.04.2.27 · source: NVD
GF
Gs510tpp Firmware · Netgear
through 6.6.2.6 · source: NVD
GF
Gs716t Firmware · Netgear
through 5.4.2.27; through 6.3.1.16 · source: NVD
GF
Gs724t Firmware · Netgear
through 5.4.2.27; through 6.3.1.16 · source: NVD
GF
Gs728tpsb Firmware · Netgear
through 5.3.0.29 · source: NVD
GF
Gs728tsb Firmware · Netgear
through 5.3.0.29 · source: NVD
GF
Gs728txs Firmware · Netgear
through 6.1.0.35 · source: NVD