CVE-2017-18715
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
Confidence
High
EPSS
Percentile
33.8%
Certain NETGEAR devices are affected by reflected XSS. This affects EX3700 before 1.0.0.66, EX3800 before 1.0.0.66, EX6100 before 1.0.2.20, EX6120 before 1.0.0.34, EX6150 before 1.0.0.36, EX6200 before 1.0.3.84, and EX7000 before 1.0.0.60.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| netgear | ex3700_firmware | * | cpe:2.3:o:netgear:ex3700_firmware:*:*:*:*:*:*:*:* |
| netgear | ex3700 | - | cpe:2.3:h:netgear:ex3700:-:*:*:*:*:*:*:* |
| netgear | ex3800_firmware | * | cpe:2.3:o:netgear:ex3800_firmware:*:*:*:*:*:*:*:* |
| netgear | ex3800 | - | cpe:2.3:h:netgear:ex3800:-:*:*:*:*:*:*:* |
| netgear | ex6100_firmware | * | cpe:2.3:o:netgear:ex6100_firmware:*:*:*:*:*:*:*:* |
| netgear | ex6100 | - | cpe:2.3:h:netgear:ex6100:-:*:*:*:*:*:*:* |
| netgear | ex6120_firmware | * | cpe:2.3:o:netgear:ex6120_firmware:*:*:*:*:*:*:*:* |
| netgear | ex6120 | - | cpe:2.3:h:netgear:ex6120:-:*:*:*:*:*:*:* |
| netgear | ex6150_firmware | * | cpe:2.3:o:netgear:ex6150_firmware:*:*:*:*:*:*:*:* |
| netgear | ex6150 | - | cpe:2.3:h:netgear:ex6150:-:*:*:*:*:*:*:* |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
Confidence
High
EPSS
Percentile
33.8%