// For flags

CVE-2017-18860

 

Severity Score

7.7
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Certain NETGEAR devices are affected by debugging command execution. This affects FS752TP 5.4.2.19 and earlier, GS108Tv2 5.4.2.29 and earlier, GS110TP 5.4.2.29 and earlier, GS418TPP 6.6.2.6 and earlier, GS510TLP 6.6.2.6 and earlier, GS510TP 5.04.2.27 and earlier, GS510TPP 6.6.2.6 and earlier, GS716Tv2 5.4.2.27 and earlier, GS716Tv3 6.3.1.16 and earlier, GS724Tv3 5.4.2.27 and earlier, GS724Tv4 6.3.1.16 and earlier, GS728TPSB 5.3.0.29 and earlier, GS728TSB 5.3.0.29 and earlier, GS728TXS 6.1.0.35 and earlier, GS748Tv4 5.4.2.27 and earlier, GS748Tv5 6.3.1.16 and earlier, GS752TPSB 5.3.0.29 and earlier, GS752TSB 5.3.0.29 and earlier, GS752TXS 6.1.0.35 and earlier, M4200 12.0.2.10 and earlier, M4300 12.0.2.10 and earlier, M5300 11.0.0.28 and earlier, M6100 11.0.0.28 and earlier, M7100 11.0.0.28 and earlier, S3300 6.6.1.4 and earlier, XS708T 6.6.0.11 and earlier, XS712T 6.1.0.34 and earlier, and XS716T 6.6.0.11 and earlier.

Determinados dispositivos NETGEAR están afectados por una ejecución de comandos de depuración. Esto afecta a FS752TP versiones 5.4.2.19 y anteriores, GS108Tv2 versiones 5.4.2.29 y anteriores, GS110TP versiones 5.4.2.29 y anteriores, GS418TPP versiones 6.6.2.6 y anteriores, GS510TLP versiones 6.6.2.6 y anteriores, GS510TP versiones 5.04.2.27 y anteriores, GS510TPP versiones 6.6.2.6 y anteriores, GS716Tv2 versiones 5.4.2.27 y anteriores, GS716Tv3 versiones 6.3.1.16 y anteriores, GS724Tv3 versiones 5.4.2.27 y anteriores, GS724Tv4 versiones 6.3.1.16 y anteriores, GS728TPSB versiones 5.3.0.29 y anteriores, GS728TSB versiones 5.3.0.29 y anteriores, GS728TXS versiones 6.1.0. 35 y anteriores, GS748Tv4 versiones 5.4.2.27 y anteriores, GS748Tv5 versiones 6.3.1.16 y anteriores, GS752TPSB versiones 5.3.0.29 y anteriores, GS752TSB versiones 5.3.0.29 y anteriores, GS752TXS versiones 6.1.0.35 y anteriores, M4200 versiones 12.0.2.10 y anteriores, M4300 versiones 12.0.2. 10 y anteriores, M5300 versiones 11.0.0.28 y anteriores, M6100 versiones 11.0.0.28 y anteriores, M7100 versiones 11.0.0.28 y anteriores, S3300 versiones 6.6.1.4 y anteriores, XS708T versiones 6.6.0.11 y anteriores, XS712T versiones 6.1.0.34 y anteriores, y XS716T versiones 6.6.0.11 y anteriores.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
High
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2020-04-27 CVE Reserved
  • 2020-04-29 CVE Published
  • 2023-03-08 EPSS Updated
  • 2024-08-05 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Netgear
Search vendor "Netgear"
Fs752tp Firmware
Search vendor "Netgear" for product "Fs752tp Firmware"
<= 5.4.2.19
Search vendor "Netgear" for product "Fs752tp Firmware" and version " <= 5.4.2.19"
-
Affected
in Netgear
Search vendor "Netgear"
Fs752tp
Search vendor "Netgear" for product "Fs752tp"
--
Safe
Netgear
Search vendor "Netgear"
Gs108t Firmware
Search vendor "Netgear" for product "Gs108t Firmware"
<= 5.4.2.29
Search vendor "Netgear" for product "Gs108t Firmware" and version " <= 5.4.2.29"
-
Affected
in Netgear
Search vendor "Netgear"
Gs108tv2
Search vendor "Netgear" for product "Gs108tv2"
--
Safe
Netgear
Search vendor "Netgear"
Gs110tp Firmware
Search vendor "Netgear" for product "Gs110tp Firmware"
<= 5.4.2.29
Search vendor "Netgear" for product "Gs110tp Firmware" and version " <= 5.4.2.29"
-
Affected
in Netgear
Search vendor "Netgear"
Gs110tp
Search vendor "Netgear" for product "Gs110tp"
--
Safe
Netgear
Search vendor "Netgear"
Gs418tpp Firmware
Search vendor "Netgear" for product "Gs418tpp Firmware"
<= 6.6.2.6
Search vendor "Netgear" for product "Gs418tpp Firmware" and version " <= 6.6.2.6"
-
Affected
in Netgear
Search vendor "Netgear"
Gs418tpp
Search vendor "Netgear" for product "Gs418tpp"
--
Safe
Netgear
Search vendor "Netgear"
Gs510tlp Firmware
Search vendor "Netgear" for product "Gs510tlp Firmware"
<= 6.6.2.6
Search vendor "Netgear" for product "Gs510tlp Firmware" and version " <= 6.6.2.6"
-
Affected
in Netgear
Search vendor "Netgear"
Gs510tlp
Search vendor "Netgear" for product "Gs510tlp"
--
Safe
Netgear
Search vendor "Netgear"
Gs510tp Firmware
Search vendor "Netgear" for product "Gs510tp Firmware"
<= 5.04.2.27
Search vendor "Netgear" for product "Gs510tp Firmware" and version " <= 5.04.2.27"
-
Affected
in Netgear
Search vendor "Netgear"
Gs510tp
Search vendor "Netgear" for product "Gs510tp"
--
Safe
Netgear
Search vendor "Netgear"
Gs510tpp Firmware
Search vendor "Netgear" for product "Gs510tpp Firmware"
<= 6.6.2.6
Search vendor "Netgear" for product "Gs510tpp Firmware" and version " <= 6.6.2.6"
-
Affected
in Netgear
Search vendor "Netgear"
Gs510tpp
Search vendor "Netgear" for product "Gs510tpp"
--
Safe
Netgear
Search vendor "Netgear"
Gs716t Firmware
Search vendor "Netgear" for product "Gs716t Firmware"
<= 5.4.2.27
Search vendor "Netgear" for product "Gs716t Firmware" and version " <= 5.4.2.27"
-
Affected
in Netgear
Search vendor "Netgear"
Gs716t
Search vendor "Netgear" for product "Gs716t"
v2
Search vendor "Netgear" for product "Gs716t" and version "v2"
-
Safe
Netgear
Search vendor "Netgear"
Gs716t Firmware
Search vendor "Netgear" for product "Gs716t Firmware"
<= 6.3.1.16
Search vendor "Netgear" for product "Gs716t Firmware" and version " <= 6.3.1.16"
-
Affected
in Netgear
Search vendor "Netgear"
Gs716t
Search vendor "Netgear" for product "Gs716t"
v3
Search vendor "Netgear" for product "Gs716t" and version "v3"
-
Safe
Netgear
Search vendor "Netgear"
Gs724t Firmware
Search vendor "Netgear" for product "Gs724t Firmware"
<= 5.4.2.27
Search vendor "Netgear" for product "Gs724t Firmware" and version " <= 5.4.2.27"
-
Affected
in Netgear
Search vendor "Netgear"
Gs724t
Search vendor "Netgear" for product "Gs724t"
v3
Search vendor "Netgear" for product "Gs724t" and version "v3"
-
Safe
Netgear
Search vendor "Netgear"
Gs724t Firmware
Search vendor "Netgear" for product "Gs724t Firmware"
<= 6.3.1.16
Search vendor "Netgear" for product "Gs724t Firmware" and version " <= 6.3.1.16"
-
Affected
in Netgear
Search vendor "Netgear"
Gs724t
Search vendor "Netgear" for product "Gs724t"
v4
Search vendor "Netgear" for product "Gs724t" and version "v4"
-
Safe
Netgear
Search vendor "Netgear"
Gs728tpsb Firmware
Search vendor "Netgear" for product "Gs728tpsb Firmware"
<= 5.3.0.29
Search vendor "Netgear" for product "Gs728tpsb Firmware" and version " <= 5.3.0.29"
-
Affected
in Netgear
Search vendor "Netgear"
Gs728tpsb
Search vendor "Netgear" for product "Gs728tpsb"
--
Safe
Netgear
Search vendor "Netgear"
Gs728tsb Firmware
Search vendor "Netgear" for product "Gs728tsb Firmware"
<= 5.3.0.29
Search vendor "Netgear" for product "Gs728tsb Firmware" and version " <= 5.3.0.29"
-
Affected
in Netgear
Search vendor "Netgear"
Gs728tsb
Search vendor "Netgear" for product "Gs728tsb"
--
Safe
Netgear
Search vendor "Netgear"
Gs728txs Firmware
Search vendor "Netgear" for product "Gs728txs Firmware"
<= 6.1.0.35
Search vendor "Netgear" for product "Gs728txs Firmware" and version " <= 6.1.0.35"
-
Affected
in Netgear
Search vendor "Netgear"
Gs728txs
Search vendor "Netgear" for product "Gs728txs"
--
Safe
Netgear
Search vendor "Netgear"
Gs748t Firmware
Search vendor "Netgear" for product "Gs748t Firmware"
<= 5.4.2.27
Search vendor "Netgear" for product "Gs748t Firmware" and version " <= 5.4.2.27"
-
Affected
in Netgear
Search vendor "Netgear"
Gs748t
Search vendor "Netgear" for product "Gs748t"
v4
Search vendor "Netgear" for product "Gs748t" and version "v4"
-
Safe
Netgear
Search vendor "Netgear"
Gs748t Firmware
Search vendor "Netgear" for product "Gs748t Firmware"
<= 6.3.1.16
Search vendor "Netgear" for product "Gs748t Firmware" and version " <= 6.3.1.16"
-
Affected
in Netgear
Search vendor "Netgear"
Gs748t
Search vendor "Netgear" for product "Gs748t"
v5
Search vendor "Netgear" for product "Gs748t" and version "v5"
-
Safe
Netgear
Search vendor "Netgear"
Gs752tpsb Firmware
Search vendor "Netgear" for product "Gs752tpsb Firmware"
<= 5.3.0.29
Search vendor "Netgear" for product "Gs752tpsb Firmware" and version " <= 5.3.0.29"
-
Affected
in Netgear
Search vendor "Netgear"
Gs752tpsb
Search vendor "Netgear" for product "Gs752tpsb"
--
Safe
Netgear
Search vendor "Netgear"
Gs752tsb Firmware
Search vendor "Netgear" for product "Gs752tsb Firmware"
<= 5.3.0.29
Search vendor "Netgear" for product "Gs752tsb Firmware" and version " <= 5.3.0.29"
-
Affected
in Netgear
Search vendor "Netgear"
Gs752tsb
Search vendor "Netgear" for product "Gs752tsb"
--
Safe
Netgear
Search vendor "Netgear"
Gs752txs Firmware
Search vendor "Netgear" for product "Gs752txs Firmware"
<= 6.1.0.35
Search vendor "Netgear" for product "Gs752txs Firmware" and version " <= 6.1.0.35"
-
Affected
in Netgear
Search vendor "Netgear"
Gs752txs
Search vendor "Netgear" for product "Gs752txs"
--
Safe
Netgear
Search vendor "Netgear"
M4200 Firmware
Search vendor "Netgear" for product "M4200 Firmware"
<= 12.0.2.10
Search vendor "Netgear" for product "M4200 Firmware" and version " <= 12.0.2.10"
-
Affected
in Netgear
Search vendor "Netgear"
M4200
Search vendor "Netgear" for product "M4200"
--
Safe
Netgear
Search vendor "Netgear"
M4300 Firmware
Search vendor "Netgear" for product "M4300 Firmware"
<= 12.0.2.10
Search vendor "Netgear" for product "M4300 Firmware" and version " <= 12.0.2.10"
-
Affected
in Netgear
Search vendor "Netgear"
M4300
Search vendor "Netgear" for product "M4300"
--
Safe
Netgear
Search vendor "Netgear"
M5300 Firmware
Search vendor "Netgear" for product "M5300 Firmware"
<= 11.0.0.28
Search vendor "Netgear" for product "M5300 Firmware" and version " <= 11.0.0.28"
-
Affected
in Netgear
Search vendor "Netgear"
M5300
Search vendor "Netgear" for product "M5300"
--
Safe
Netgear
Search vendor "Netgear"
M6100 Firmware
Search vendor "Netgear" for product "M6100 Firmware"
<= 11.0.0.28
Search vendor "Netgear" for product "M6100 Firmware" and version " <= 11.0.0.28"
-
Affected
in Netgear
Search vendor "Netgear"
M6100
Search vendor "Netgear" for product "M6100"
--
Safe
Netgear
Search vendor "Netgear"
M7100 Firmware
Search vendor "Netgear" for product "M7100 Firmware"
<= 11.0.0.28
Search vendor "Netgear" for product "M7100 Firmware" and version " <= 11.0.0.28"
-
Affected
in Netgear
Search vendor "Netgear"
M7100
Search vendor "Netgear" for product "M7100"
--
Safe
Netgear
Search vendor "Netgear"
S3300 Firmware
Search vendor "Netgear" for product "S3300 Firmware"
<= 6.6.1.4
Search vendor "Netgear" for product "S3300 Firmware" and version " <= 6.6.1.4"
-
Affected
in Netgear
Search vendor "Netgear"
S3300
Search vendor "Netgear" for product "S3300"
--
Safe
Netgear
Search vendor "Netgear"
Xs708t Firmware
Search vendor "Netgear" for product "Xs708t Firmware"
<= 6.6.0.11
Search vendor "Netgear" for product "Xs708t Firmware" and version " <= 6.6.0.11"
-
Affected
in Netgear
Search vendor "Netgear"
Xs708t
Search vendor "Netgear" for product "Xs708t"
--
Safe
Netgear
Search vendor "Netgear"
Xs712t Firmware
Search vendor "Netgear" for product "Xs712t Firmware"
<= 6.1.0.34
Search vendor "Netgear" for product "Xs712t Firmware" and version " <= 6.1.0.34"
-
Affected
in Netgear
Search vendor "Netgear"
Xs712t
Search vendor "Netgear" for product "Xs712t"
--
Safe
Netgear
Search vendor "Netgear"
Xs716t Firmware
Search vendor "Netgear" for product "Xs716t Firmware"
<= 6.6.0.11
Search vendor "Netgear" for product "Xs716t Firmware" and version " <= 6.6.0.11"
-
Affected
in Netgear
Search vendor "Netgear"
Xs716t
Search vendor "Netgear" for product "Xs716t"
--
Safe