CVE-2017-2137

EPSS 0.06%
Published 28.04.2017 16:59:01
Last modified 20.04.2025 01:37:25
Source vultures@jpcert.or.jp
Teams watchlist Login
Open Login

ProSAFE Plus Configuration Utility prior to 2.3.29 allows remote attackers to bypass access restriction and change configurations of the switch via SOAP requests.

Affected products Warnungen 0 Metrics 3 CWE 0 References 5

Data is provided by the National Vulnerability Database (NVD)

Netgear ≫ Prosafe Plus Configuration Utility Version <= 2.3.28

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.06%	0.169

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	3.7	2.2	1.4	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

http://jvn.jp/en/jp/JVN08740778/index.html

Third Party Advisory

VDB Entry

https://kb.netgear.com/000038443/Security-Advisory-for-Insecure-SOAP-Access-in-ProSAFE-Plus-Configuration-Utility-PSV-2017-1997

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2017-2137

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-2137

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-2137

EUVD