First published: Tue Apr 28 2020(Updated: )
Certain NETGEAR devices are affected by authentication bypass. This affects JGS516PE before 2017-05-11, JGS524Ev2 before 2017-05-11, JGS524PE before 2017-05-11, GS105Ev2 before 2017-05-11, GS105PE before 2017-05-11, GS108Ev3 before 2017-05-11, GS108PEv3 before 2017-05-11, GS116Ev2 before 2017-05-11, GSS108E before 2017-05-11, GSS116E before 2017-05-11, XS708Ev2 before 2017-05-11, and XS716E before 2017-05-11.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Netgear JGS516PE Firmware | <2017-05-11 | |
Netgear JGS516PE Firmware | ||
Netgear JGS524E Firmware | <2017-05-11 | |
Netgear JGS524E Firmware | =v2 | |
Netgear JGS524PE Firmware | <2017-05-11 | |
Netgear JGS524PE Firmware | ||
Netgear GS105E Firmware | <2017-05-11 | |
Netgear GS105E Firmware | =v2 | |
Netgear GS105PE | <2017-05-11 | |
Netgear GS105PE Firmware | ||
Netgear GS108E Firmware | <2017-05-11 | |
Netgear GS108E Firmware | =v3 | |
Netgear GS108PE Firmware | <2017-05-11 | |
Netgear GS108PE Firmware | =v3 | |
Netgear GS116E | <2017-05-11 | |
Netgear GS116E Firmware | =v2 | |
Netgear GSS108E | <2017-05-11 | |
Netgear GSS108E Firmware | ||
Netgear GSS116E Firmware | <2017-05-11 | |
Netgear GSS116E Firmware | ||
Netgear XS708T | <2017-05-11 | |
Netgear XS708E | =v2 | |
Netgear XS716E Firmware | <2017-05-11 | |
Netgear XS716E Firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
JGS516PE, JGS524Ev2, JGS524PE, GS105Ev2, GS105PE, GS108Ev3, GS108PEv3, GS116Ev2, GSS108E, GSS116E, XS708E, and XS716E.
The severity of CVE-2017-18862 is medium, with a CVSS score of 6.5.
CVE-2017-18862 allows an attacker to bypass authentication on certain NETGEAR devices.
To fix CVE-2017-18862, update the firmware of the affected NETGEAR devices to a version released after May 11, 2017.
More information about CVE-2017-18862 can be found in the Netgear security advisory.