CVE-2017-18834 Certain NETGEAR devices are affected by reflected XSS.

What is CVE-2017-18834?

CVE-2017-18834 is a medium-severity vulnerability in n/a, published on 20 Apr 2020.

Official description

Certain NETGEAR devices are affected by reflected XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15.

Weakness: CWE-79

Which versions are affected by CVE-2017-18834?

It affects 10 products.

Products include Netgear M4200 Firmware, Netgear M4300-12x12f Firmware, Netgear M4300-24x24f Firmware, Netgear M4300-24x Firmware, Netgear M4300-28g-Poe\+ Firmware, Netgear M4300-28g Firmware and 4 more.

How do I fix CVE-2017-18834?

No fix has been published for CVE-2017-18834 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-18834 being exploited?

There is no known exploitation of CVE-2017-18834 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2017-18822 Privilege escalation in n/a High 7.8
• CVE-2017-18826 Privilege escalation in n/a High 7.8
• CVE-2017-18829 Privilege escalation in n/a High 7.8
• CVE-2017-18830 Privilege escalation in n/a High 7.8
• CVE-2017-18831 Cross-site scripting in n/a High 7.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-87jj-fh8g-jj9v.