Privilege Escalation Vulnerability in NETGEAR Managed Switches
CVE-2017-18838

7.8HIGH

Key Information:

Vendor

Netgear
Status
M4300-28g Firmware
Vendor
CVE Published:
20 April 2020

What is CVE-2017-18838?

Certain NETGEAR managed switches, including various models in the M4300 series and the M4200, are impacted by a vulnerability that allows attackers to escalate their privileges. This issue is present in devices running versions prior to 12.0.2.15. Without proper mitigation, unauthorized users could gain elevated access to system functions, which could lead to further exploitation of network resources. Users are urged to update their devices to the latest firmware version to protect against potential threats associated with this vulnerability.

References

https://kb.netgear.com/000049024/Security-Advisory-for-Ve...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.