CVE-2017-18862 Auth bypass in n/a
Attackers can bypass authentication on NETGEAR managed switches to gain unauthorized access to the device interface.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-18862?
CVE-2017-18862 is a medium-severity authentication bypass vulnerability in n/a, published on 28 Apr 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Certain NETGEAR devices are affected by authentication bypass. This affects JGS516PE before 2017-05-11, JGS524Ev2 before 2017-05-11, JGS524PE before 2017-05-11, GS105Ev2 before 2017-05-11, GS105PE before 2017-05-11, GS108Ev3 before 2017-05-11, GS108PEv3 before 2017-05-11, GS116Ev2 before 2017-05-11, GSS108E before 2017-05-11, GSS116E before 2017-05-11, XS708Ev2 before 2017-05-11, and XS716E before 2017-05-11.
Weakness: CWE-287
Which versions are affected by CVE-2017-18862?
It affects 12 products.
Products include Netgear Gs105e Firmware, Netgear Gs105pe Firmware, Netgear Gs108e Firmware, Netgear Gs108pe Firmware, Netgear Gs116e Firmware, Netgear Gss108e Firmware and 6 more.
How do I fix CVE-2017-18862?
No fix has been published for CVE-2017-18862 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2017-18862 being exploited?
There is no known exploitation of CVE-2017-18862 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-wccv-5c5g-j682.