CVEvulnerability

CVE-2017-18858

9.8 CRITICAL Published 2020-04-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-04-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-78

Description

Certain NETGEAR devices are affected by command execution. This affects M4200-10MG-POE+ 12.0.2.11 and earlier, M4300-28G 12.0.2.11 and earlier, M4300-52G 12.0.2.11 and earlier, M4300-28G-POE+ 12.0.2.11 and earlier, M4300-52G-POE+ 12.0.2.11 and earlier, M4300-8X8F 12.0.2.11 and earlier, M4300-12X12F 12.0.2.11 and earlier, M4300-24X24F 12.0.2.11 and earlier, M4300-24X 12.0.2.11 and earlier, and M4300-48X 12.0.2.11 and earlier.

Affected configurations

• netgear m4200-10mg-poe\+ firmware (<= 12.0.2.11) • netgear m4300-28g firmware (<= 12.0.2.11) • netgear m4300-52g firmware (<= 12.0.2.11) • netgear m4300-28g-poe\+ firmware (<= 12.0.2.11) • netgear m4300-52g-poe\+ firmware (<= 12.0.2.11) • netgear m4300-8x8f firmware (<= 12.0.2.11) • netgear m4300-12x12f firmware (<= 12.0.2.11) • netgear m4300-24x24f firmware (<= 12.0.2.11) • netgear m4300-24x firmware (<= 12.0.2.11) • netgear m4300-48x firmware (<= 12.0.2.11)

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References