Lucene search

[email protected]NVD:CVE-2017-18860

HistoryApr 29, 2020 - 2:15 p.m.

CVE-2017-18860

2020-04-2914:15:14

CWE-74

[email protected]

web.nvd.nist.gov

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

CVSS3

7.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

23.3%

JSON

Certain NETGEAR devices are affected by debugging command execution. This affects FS752TP 5.4.2.19 and earlier, GS108Tv2 5.4.2.29 and earlier, GS110TP 5.4.2.29 and earlier, GS418TPP 6.6.2.6 and earlier, GS510TLP 6.6.2.6 and earlier, GS510TP 5.04.2.27 and earlier, GS510TPP 6.6.2.6 and earlier, GS716Tv2 5.4.2.27 and earlier, GS716Tv3 6.3.1.16 and earlier, GS724Tv3 5.4.2.27 and earlier, GS724Tv4 6.3.1.16 and earlier, GS728TPSB 5.3.0.29 and earlier, GS728TSB 5.3.0.29 and earlier, GS728TXS 6.1.0.35 and earlier, GS748Tv4 5.4.2.27 and earlier, GS748Tv5 6.3.1.16 and earlier, GS752TPSB 5.3.0.29 and earlier, GS752TSB 5.3.0.29 and earlier, GS752TXS 6.1.0.35 and earlier, M4200 12.0.2.10 and earlier, M4300 12.0.2.10 and earlier, M5300 11.0.0.28 and earlier, M6100 11.0.0.28 and earlier, M7100 11.0.0.28 and earlier, S3300 6.6.1.4 and earlier, XS708T 6.6.0.11 and earlier, XS712T 6.1.0.34 and earlier, and XS716T 6.6.0.11 and earlier.

Affected configurations

Nvd

Node

netgearfs752tp_firmwareRange≤5.4.2.19

AND

netgearfs752tpMatch-

Node

netgeargs108t_firmwareRange≤5.4.2.29

AND

netgeargs108tv2Match-

Node

netgeargs110tp_firmwareRange≤5.4.2.29

AND

netgeargs110tpMatch-

Node

netgeargs418tpp_firmwareRange≤6.6.2.6

AND

netgeargs418tppMatch-

Node

netgeargs510tlp_firmwareRange≤6.6.2.6

AND

netgeargs510tlpMatch-

Node

netgeargs510tp_firmwareRange≤5.04.2.27

AND

netgeargs510tpMatch-

Node

netgeargs510tpp_firmwareRange≤6.6.2.6

AND

netgeargs510tppMatch-

Node

netgeargs716t_firmwareRange≤5.4.2.27

AND

netgeargs716tMatchv2

Node

netgeargs716t_firmwareRange≤6.3.1.16

AND

netgeargs716tMatchv3

Node

netgeargs724t_firmwareRange≤5.4.2.27

AND

netgeargs724tMatchv3

Node

netgeargs724t_firmwareRange≤6.3.1.16

AND

netgeargs724tMatchv4

Node

netgeargs728tpsb_firmwareRange≤5.3.0.29

AND

netgeargs728tpsbMatch-

Node

netgeargs728tsb_firmwareRange≤5.3.0.29

AND

netgeargs728tsbMatch-

Node

netgeargs728txs_firmwareRange≤6.1.0.35

AND

netgeargs728txsMatch-

Node

netgeargs748t_firmwareRange≤5.4.2.27

AND

netgeargs748tMatchv4

Node

netgeargs748t_firmwareRange≤6.3.1.16

AND

netgeargs748tMatchv5

Node

netgeargs752tpsb_firmwareRange≤5.3.0.29

AND

netgeargs752tpsbMatch-

Node

netgeargs752tsb_firmwareRange≤5.3.0.29

AND

netgeargs752tsbMatch-

Node

netgeargs752txs_firmwareRange≤6.1.0.35

AND

netgeargs752txsMatch-

Node

netgearm4200_firmwareRange≤12.0.2.10

AND

netgearm4200Match-

Node

netgearm4300_firmwareRange≤12.0.2.10

AND

netgearm4300Match-

Node

netgearm5300_firmwareRange≤11.0.0.28

AND

netgearm5300Match-

Node

netgearm6100_firmwareRange≤11.0.0.28

AND

netgearm6100Match-

Node

netgearm7100_firmwareRange≤11.0.0.28

AND

netgearm7100Match-

Node

netgears3300_firmwareRange≤6.6.1.4

AND

netgears3300Match-

Node

netgearxs708t_firmwareRange≤6.6.0.11

AND

netgearxs708tMatch-

Node

netgearxs712t_firmwareRange≤6.1.0.34

AND

netgearxs712tMatch-

Node

netgearxs716t_firmwareRange≤6.6.0.11

AND

netgearxs716tMatch-

VendorProductVersionCPE
netgearfs752tp_firmware*cpe:2.3:o:netgear:fs752tp_firmware:*:*:*:*:*:*:*:*
netgearfs752tp-cpe:2.3:h:netgear:fs752tp:-:*:*:*:*:*:*:*
netgeargs108t_firmware*cpe:2.3:o:netgear:gs108t_firmware:*:*:*:*:*:*:*:*
netgeargs108tv2-cpe:2.3:h:netgear:gs108tv2:-:*:*:*:*:*:*:*
netgeargs110tp_firmware*cpe:2.3:o:netgear:gs110tp_firmware:*:*:*:*:*:*:*:*
netgeargs110tp-cpe:2.3:h:netgear:gs110tp:-:*:*:*:*:*:*:*
netgeargs418tpp_firmware*cpe:2.3:o:netgear:gs418tpp_firmware:*:*:*:*:*:*:*:*
netgeargs418tpp-cpe:2.3:h:netgear:gs418tpp:-:*:*:*:*:*:*:*
netgeargs510tlp_firmware*cpe:2.3:o:netgear:gs510tlp_firmware:*:*:*:*:*:*:*:*
netgeargs510tlp-cpe:2.3:h:netgear:gs510tlp:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
netgear	fs752tp_firmware	*	cpe:2.3:o:netgear:fs752tp_firmware::::::::
netgear	fs752tp	-	cpe:2.3:h:netgear:fs752tp:-:::::::*
netgear	gs108t_firmware	*	cpe:2.3:o:netgear:gs108t_firmware::::::::
netgear	gs108tv2	-	cpe:2.3:h:netgear:gs108tv2:-:::::::*
netgear	gs110tp_firmware	*	cpe:2.3:o:netgear:gs110tp_firmware::::::::
netgear	gs110tp	-	cpe:2.3:h:netgear:gs110tp:-:::::::*
netgear	gs418tpp_firmware	*	cpe:2.3:o:netgear:gs418tpp_firmware::::::::
netgear	gs418tpp	-	cpe:2.3:h:netgear:gs418tpp:-:::::::*
netgear	gs510tlp_firmware	*	cpe:2.3:o:netgear:gs510tlp_firmware::::::::
netgear	gs510tlp	-	cpe:2.3:h:netgear:gs510tlp:-:::::::*

Rows per page:

1-10 of 531

References

kb.netgear.com/000038519/Security-Advisory-for-Authentication-Bypass-and-Remote-Command-Execution-on-Some-Smart-and-Managed-Switches-PSV-2017-0857

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

CVSS3

7.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

23.3%

JSON

Related for NVD:CVE-2017-18860

prion1 cvelist1 cve1