CVE-2017-2137

ProSAFE Plus Configuration Utility prior to 2.3.29 allows remote attackers to bypass access restriction and change configurations of the switch via SOAP requests.

Score

CVSS 3.0 3.7 Low

Status

Modified - vultures@jpcert.or.jp

Published

2017-04-28

Last modified

2024-08-05

Affected products

• Prosafe Plus Configuration Utility (Netgear)

References

• http://jvn.jp/en/jp/JVN08740778/index.html
• https://kb.netgear.com/000038443/Security-Advisory-for-Insecure-SOAP-Access-in-ProSAFE-Plus-Configuration-Utility-PSV-2…