peter bassill · operator
$ cve CVE-2017-18858 JSON

CVE-2017-18858

9.8
CRITICAL · CVSS 3.1 · EPSS 3.1% (pctl 88)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

Certain NETGEAR devices are affected by command execution. This affects M4200-10MG-POE+ 12.0.2.11 and earlier, M4300-28G 12.0.2.11 and earlier, M4300-52G 12.0.2.11 and earlier, M4300-28G-POE+ 12.0.2.11 and earlier, M4300-52G-POE+ 12.0.2.11 and earlier, M4300-8X8F 12.0.2.11 and earlier, M4300-12X12F 12.0.2.11 and earlier, M4300-24X24F 12.0.2.11 and earlier, M4300-24X 12.0.2.11 and earlier, and M4300-48X 12.0.2.11 and earlier.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS3.15% — more likely to be exploited than 88% of all CVEs
WeaknessCWE-78
On CISA KEVno
Public exploitnone known
Published2020-04-28
Last modified2026-06-17

Affected (20)

VendorProduct
netgearm4200-10mg-poe\+
netgearm4200-10mg-poe\+ firmware
netgearm4300-12x12f
netgearm4300-12x12f firmware
netgearm4300-24x
netgearm4300-24x firmware
netgearm4300-24x24f
netgearm4300-24x24f firmware
netgearm4300-28g
netgearm4300-28g firmware
netgearm4300-28g-poe\+
netgearm4300-28g-poe\+ firmware
netgearm4300-48x
netgearm4300-48x firmware
netgearm4300-52g
netgearm4300-52g firmware
netgearm4300-52g-poe\+
netgearm4300-52g-poe\+ firmware
netgearm4300-8x8f
netgearm4300-8x8f firmware

References

→ the Explorer  ·  watch your stack  ·  NVD