7.7

CVE-2017-18860

Certain NETGEAR devices are affected by debugging command execution. This affects FS752TP 5.4.2.19 and earlier, GS108Tv2 5.4.2.29 and earlier, GS110TP 5.4.2.29 and earlier, GS418TPP 6.6.2.6 and earlier, GS510TLP 6.6.2.6 and earlier, GS510TP 5.04.2.27 and earlier, GS510TPP 6.6.2.6 and earlier, GS716Tv2 5.4.2.27 and earlier, GS716Tv3 6.3.1.16 and earlier, GS724Tv3 5.4.2.27 and earlier, GS724Tv4 6.3.1.16 and earlier, GS728TPSB 5.3.0.29 and earlier, GS728TSB 5.3.0.29 and earlier, GS728TXS 6.1.0.35 and earlier, GS748Tv4 5.4.2.27 and earlier, GS748Tv5 6.3.1.16 and earlier, GS752TPSB 5.3.0.29 and earlier, GS752TSB 5.3.0.29 and earlier, GS752TXS 6.1.0.35 and earlier, M4200 12.0.2.10 and earlier, M4300 12.0.2.10 and earlier, M5300 11.0.0.28 and earlier, M6100 11.0.0.28 and earlier, M7100 11.0.0.28 and earlier, S3300 6.6.1.4 and earlier, XS708T 6.6.0.11 and earlier, XS712T 6.1.0.34 and earlier, and XS716T 6.6.0.11 and earlier.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netgear ≫ Fs752tp Firmware Version <= 5.4.2.19
   Netgear ≫ Fs752tp Version -
Netgear ≫ Gs108t Firmware Version <= 5.4.2.29
   Netgear ≫ Gs108tv2 Version -
Netgear ≫ Gs110tp Firmware Version <= 5.4.2.29
   Netgear ≫ Gs110tp Version -
Netgear ≫ Gs418tpp Firmware Version <= 6.6.2.6
   Netgear ≫ Gs418tpp Version -
Netgear ≫ Gs510tlp Firmware Version <= 6.6.2.6
   Netgear ≫ Gs510tlp Version -
Netgear ≫ Gs510tp Firmware Version <= 5.04.2.27
   Netgear ≫ Gs510tp Version -
Netgear ≫ Gs510tpp Firmware Version <= 6.6.2.6
   Netgear ≫ Gs510tpp Version -
Netgear ≫ Gs716t Firmware Version <= 5.4.2.27
   Netgear ≫ Gs716t Version v2
Netgear ≫ Gs716t Firmware Version <= 6.3.1.16
   Netgear ≫ Gs716t Version v3
Netgear ≫ Gs724t Firmware Version <= 5.4.2.27
   Netgear ≫ Gs724t Version v3
Netgear ≫ Gs724t Firmware Version <= 6.3.1.16
   Netgear ≫ Gs724t Version v4
Netgear ≫ Gs728tpsb Firmware Version <= 5.3.0.29
   Netgear ≫ Gs728tpsb Version -
Netgear ≫ Gs728tsb Firmware Version <= 5.3.0.29
   Netgear ≫ Gs728tsb Version -
Netgear ≫ Gs728txs Firmware Version <= 6.1.0.35
   Netgear ≫ Gs728txs Version -
Netgear ≫ Gs748t Firmware Version <= 5.4.2.27
   Netgear ≫ Gs748t Version v4
Netgear ≫ Gs748t Firmware Version <= 6.3.1.16
   Netgear ≫ Gs748t Version v5
Netgear ≫ Gs752tpsb Firmware Version <= 5.3.0.29
   Netgear ≫ Gs752tpsb Version -
Netgear ≫ Gs752tsb Firmware Version <= 5.3.0.29
   Netgear ≫ Gs752tsb Version -
Netgear ≫ Gs752txs Firmware Version <= 6.1.0.35
   Netgear ≫ Gs752txs Version -
Netgear ≫ M4200 Firmware Version <= 12.0.2.10
   Netgear ≫ M4200 Version -
Netgear ≫ M4300 Firmware Version <= 12.0.2.10
   Netgear ≫ M4300 Version -
Netgear ≫ M5300 Firmware Version <= 11.0.0.28
   Netgear ≫ M5300 Version -
Netgear ≫ M6100 Firmware Version <= 11.0.0.28
   Netgear ≫ M6100 Version -
Netgear ≫ M7100 Firmware Version <= 11.0.0.28
   Netgear ≫ M7100 Version -
Netgear ≫ S3300 Firmware Version <= 6.6.1.4
   Netgear ≫ S3300 Version -
Netgear ≫ Xs708t Firmware Version <= 6.6.0.11
   Netgear ≫ Xs708t Version -
Netgear ≫ Xs712t Firmware Version <= 6.1.0.34
   Netgear ≫ Xs712t Version -
Netgear ≫ Xs716t Firmware Version <= 6.6.0.11
   Netgear ≫ Xs716t Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.55% 0.426
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.7 2.5 5.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
NIST 3.6 3.9 4.9
AV:L/AC:L/Au:N/C:N/I:P/A:P
CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

https://kb.netgear.com/000038519/Security-Advisory-for-Authentication-Bypass-and-Remote-Command-Execution-on-Some-Smart-and-Managed-Switches-PSV-2017-0857
Vendor Advisory