Login Request a demo
Medium severity · published Apr 28, 2020
CVE-2017-18862
Certain NETGEAR devices are affected by authentication bypass
6.5
CVSS
0.5%
EPSS
No
On KEV
Description
Certain NETGEAR devices are affected by authentication bypass. This affects JGS516PE before 2017-05-11, JGS524Ev2 before 2017-05-11, JGS524PE before 2017-05-11, GS105Ev2 before 2017-05-11, GS105PE before 2017-05-11, GS108Ev3 before 2017-05-11, GS108PEv3 before 2017-05-11, GS116Ev2 before 2017-05-11, GSS108E before 2017-05-11, GSS116E before 2017-05-11, XS708Ev2 before 2017-05-11, and XS716E before 2017-05-11.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 44% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GF
Gs105e Firmware · Netgear
before 2017-05-11 · source: NVD
GF
Gs105pe Firmware · Netgear
before 2017-05-11 · source: NVD
GF
Gs108e Firmware · Netgear
before 2017-05-11 · source: NVD
GF
Gs108pe Firmware · Netgear
before 2017-05-11 · source: NVD
GF
Gs116e Firmware · Netgear
before 2017-05-11 · source: NVD
GF
Gss108e Firmware · Netgear
before 2017-05-11 · source: NVD
GF
Gss116e Firmware · Netgear
before 2017-05-11 · source: NVD
JF
Jgs516pe Firmware · Netgear
before 2017-05-11 · source: NVD
JF
Jgs524e Firmware · Netgear
before 2017-05-11 · source: NVD
JF
Jgs524pe Firmware · Netgear
before 2017-05-11 · source: NVD
XF
Xs708e Firmware · Netgear
before 2017-05-11 · source: NVD
XF
Xs716e Firmware · Netgear
before 2017-05-11 · source: NVD
Affected product
GF
Gs105e Firmware
Netgear
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-18862
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-18862
Vendor Advisory
https://kb.netgear.com/000037849/Security-Advisory-for-Authentication-Bypass-on-ProSAFE-Web-Managed-Switches-PSV-2015-0043
More from Gs105e Firmware
9.8
CVE-2019-20699
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker
6.5
CVE-2019-20658
Certain NETGEAR devices are affected by disclosure of sensitive information
6.0
CVE-2019-20676
Certain NETGEAR devices are affected by lack of access control at the function level