Vertical Privilege Escalation in NETGEAR Managed Switches

CVE-2017-18822

Summary

Certain NETGEAR managed switches are vulnerable to vertical privilege escalation, allowing an attacker to gain elevated privileges without proper authorization. Devices affected include M4300 and M4200 series prior to version 12.0.2.15. The vulnerability stems from insufficient access controls within the device's management interface, potentially exposing sensitive data and network access to unauthorized users. Users are advised to upgrade to the latest firmware to mitigate these risks. For further information, refer to the security advisory provided by NETGEAR.

References