CVE-2017-18862

published 2020-04-28

CVE-2017-18862: Certain NETGEAR devices are affected by authentication bypass. This affects JGS516PE before 2017-05-11, JGS524Ev2 before 2017-05-11, JGS524PE before…

medium 6.5 CVSS 3.1

AV A AC L PR N UI N S U C H I N A N

Certain NETGEAR devices are affected by authentication bypass. This affects JGS516PE before 2017-05-11, JGS524Ev2 before 2017-05-11, JGS524PE before 2017-05-11, GS105Ev2 before 2017-05-11, GS105PE before 2017-05-11, GS108Ev3 before 2017-05-11, GS108PEv3 before 2017-05-11, GS116Ev2 before 2017-05-11, GSS108E before 2017-05-11, GSS116E before 2017-05-11, XS708Ev2 before 2017-05-11, and XS716E before 2017-05-11.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
netgear	gs105e_firmware	< 2017-05-11	2017-05-11
netgear	gs105pe_firmware	< 2017-05-11	2017-05-11
netgear	gs108e_firmware	< 2017-05-11	2017-05-11
netgear	gs108pe_firmware	< 2017-05-11	2017-05-11
netgear	gs116e_firmware	< 2017-05-11	2017-05-11
netgear	gss108e_firmware	< 2017-05-11	2017-05-11
netgear	gss116e_firmware	< 2017-05-11	2017-05-11
netgear	jgs516pe_firmware	< 2017-05-11	2017-05-11
netgear	jgs524e_firmware	< 2017-05-11	2017-05-11
netgear	jgs524pe_firmware	< 2017-05-11	2017-05-11
netgear	xs708e_firmware	< 2017-05-11	2017-05-11
netgear	xs716e_firmware	< 2017-05-11	2017-05-11

CWE-287