CVE-2017-18860: Certain NETGEAR devices are affected by debugging command execution. This affects FS752TP 5.4.2.19 and earlier, GS108Tv2 5.4.2.29 and earlier, GS110TP 5.4.2.29…

PriorityP339high7.7CVSS 3.1

AVLACLPRNUINSUCNIHAH

EPSS

0.52%

40.8th percentile

Certain NETGEAR devices are affected by debugging command execution. This affects FS752TP 5.4.2.19 and earlier, GS108Tv2 5.4.2.29 and earlier, GS110TP 5.4.2.29 and earlier, GS418TPP 6.6.2.6 and earlier, GS510TLP 6.6.2.6 and earlier, GS510TP 5.04.2.27 and earlier, GS510TPP 6.6.2.6 and earlier, GS716Tv2 5.4.2.27 and earlier, GS716Tv3 6.3.1.16 and earlier, GS724Tv3 5.4.2.27 and earlier, GS724Tv4 6.3.1.16 and earlier, GS728TPSB 5.3.0.29 and earlier, GS728TSB 5.3.0.29 and earlier, GS728TXS 6.1.0.35 and earlier, GS748Tv4 5.4.2.27 and earlier, GS748Tv5 6.3.1.16 and earlier, GS752TPSB 5.3.0.29 and earlier, GS752TSB 5.3.0.29 and earlier, GS752TXS 6.1.0.35 and earlier, M4200 12.0.2.10 and earlier, M4300 12.0.2.10 and earlier, M5300 11.0.0.28 and earlier, M6100 11.0.0.28 and earlier, M7100 11.0.0.28 and earlier, S3300 6.6.1.4 and earlier, XS708T 6.6.0.11 and earlier, XS712T 6.1.0.34 and earlier, and XS716T 6.6.0.11 and earlier.

Affected

28 ranges· showing 25

Vendor	Product	Version range	Fixed in
netgear	fs752tp_firmware	<= 5.4.2.19	—
netgear	gs108t_firmware	<= 5.4.2.29	—
netgear	gs110tp_firmware	<= 5.4.2.29	—
netgear	gs418tpp_firmware	<= 6.6.2.6	—
netgear	gs510tlp_firmware	<= 6.6.2.6	—
netgear	gs510tp_firmware	<= 5.04.2.27	—
netgear	gs510tpp_firmware	<= 6.6.2.6	—
netgear	gs716t_firmware	<= 5.4.2.27	—
netgear	gs716t_firmware	<= 6.3.1.16	—
netgear	gs724t_firmware	<= 5.4.2.27	—
netgear	gs724t_firmware	<= 6.3.1.16	—
netgear	gs728tpsb_firmware	<= 5.3.0.29	—
netgear	gs728tsb_firmware	<= 5.3.0.29	—
netgear	gs728txs_firmware	<= 6.1.0.35	—
netgear	gs748t_firmware	<= 5.4.2.27	—
netgear	gs748t_firmware	<= 6.3.1.16	—
netgear	gs752tpsb_firmware	<= 5.3.0.29	—
netgear	gs752tsb_firmware	<= 5.3.0.29	—
netgear	gs752txs_firmware	<= 6.1.0.35	—
netgear	m4200_firmware	<= 12.0.2.10	—
netgear	m4300_firmware	<= 12.0.2.10	—
netgear	m5300_firmware	<= 11.0.0.28	—
netgear	m6100_firmware	<= 11.0.0.28	—
netgear	m7100_firmware	<= 11.0.0.28	—
netgear	s3300_firmware	<= 6.6.1.4	—

CVSS provenance

nvdv3.17.7HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

nvdv2.03.6LOWAV:L/AC:L/Au:N/C:N/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.