CVE-2017-18862
Certain NETGEAR devices are affected by authentication bypass. This affects JGS516PE before 2017-05-11, JGS524Ev2 before 2017-05-11, JGS524PE before 2017-05-11, GS105Ev2 before 2017-05-11, GS105PE before 2017-05-11, GS108Ev3 before 2017-05-11, GS108PEv3 before 2017-05-11, GS116Ev2 before 2017-05-11, GSS108E before 2017-05-11, GSS116E before 2017-05-11, XS708Ev2 before 2017-05-11, and XS716E before 2017-05-11.
- Score
- CVSS 3.1 6.5 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2020-04-28
- Last modified
- 2024-08-05
- Weaknesses
- CWE-287
Affected products
- Gs105e Firmware (Netgear)
- Gs105pe Firmware (Netgear)
- Gs108e Firmware (Netgear)
- Gs108pe Firmware (Netgear)
- Gs116e Firmware (Netgear)
- Gss108e Firmware (Netgear)
- Gss116e Firmware (Netgear)
- Jgs516pe Firmware (Netgear)
- Jgs524e Firmware (Netgear)
- Jgs524pe Firmware (Netgear)
- Xs708e Firmware (Netgear)
- Xs716e Firmware (Netgear)
References
- https://kb.netgear.com/000037849/Security-Advisory-for-Authentication-Bypass-on-ProSAFE-Web-Managed-Switches-PSV-2015-0…
