CVE-2018-21117 — Netgear Xr500 Firmware vulnerability

3 documents3 sources
Severity
8.8HIGHNVD
EPSS
0.2%
top 52.92%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Netgear Xr500 Firmware
Timeline
PublishedApr 22
Latest updateMay 24

Description

NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers via the traceroute handler.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages1 packages

▶NVDnetgear/xr500_firmware< 2.3.2.32

🔴Vulnerability Details

2
GHSA
GHSA-xprj-64cf-h29h: NETGEAR XR500 devices before 2↗2022-05-24
▶
CVEList
CVE-2018-21117: NETGEAR XR500 devices before 2↗2020-04-22
▶
CVE-2018-21117 — Netgear Xr500 Firmware vulnerability | cvebase