6.5

CVE-2017-18747

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects EX3700 before 1.0.0.64, EX3800 before 1.0.0.64, EX6000 before 1.0.0.24, EX6130 before 1.0.0.16, EX6400 before 1.0.1.60, EX7000 before 1.0.0.50, EX7300 before 1.0.1.60, and WN2500RPv2 before 1.0.1.46.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netgear ≫ Ex3700 Firmware Version < 1.0.0.64
   Netgear ≫ Ex3700 Version -
Netgear ≫ Ex3800 Firmware Version < 1.0.0.64
   Netgear ≫ Ex3800 Version -
Netgear ≫ Ex6000 Firmware Version < 1.0.0.24
   Netgear ≫ Ex6000 Version -
Netgear ≫ Ex6130 Firmware Version < 1.0.0.16
   Netgear ≫ Ex6130 Version -
Netgear ≫ Ex6400 Firmware Version < 1.0.1.60
   Netgear ≫ Ex6400 Version -
Netgear ≫ Ex7000 Firmware Version < 1.0.0.50
   Netgear ≫ Ex7000 Version -
Netgear ≫ Ex7300 Firmware Version < 1.0.1.60
   Netgear ≫ Ex7300 Version -
Netgear ≫ Wn2500rp Firmware Version < 1.0.1.46
   Netgear ≫ Wn2500rp Version v2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.7% 0.482
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
NIST 3.3 6.5 2.9
AV:A/AC:L/Au:N/C:N/I:P/A:N
MITRE 8.8 2.8 5.9
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://kb.netgear.com/000051507/Security-Advisory-for-Security-Misconfiguration-on-Some-Extenders-PSV-2016-0115
Vendor Advisory