CVE-2017-18825
Medium
Description
Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15.
SeverityMedium
CVSS4.8
Exploit probability—
Product
Netgear M4300-28g Firmware
PublishedApr 20, 2020
First seenApr 20, 2020
How to fix
Update
- netgear m4300-28g_firmware12.0.2.15 or later
- netgear m4300-52g_firmware12.0.2.15 or later
- netgear m4300-28g-poe\+_firmware12.0.2.15 or later
- netgear m4300-52g-poe\+_firmware12.0.2.15 or later
- netgear m4300-8x8f_firmware12.0.2.15 or later
- netgear m4300-12x12f_firmware12.0.2.15 or later
- netgear m4300-24x24f_firmware12.0.2.15 or later
- netgear m4300-24x_firmware12.0.2.15 or later
- netgear m4300-48x_firmware12.0.2.15 or later
- netgear m4200_firmware12.0.2.15 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netgear m4300-28g_firmware | v < 12.0.2.15 | 12.0.2.15 |
| netgear m4300-52g_firmware | v < 12.0.2.15 | 12.0.2.15 |
| netgear m4300-28g-poe\+_firmware | v < 12.0.2.15 | 12.0.2.15 |
| netgear m4300-52g-poe\+_firmware | v < 12.0.2.15 | 12.0.2.15 |
| netgear m4300-8x8f_firmware | v < 12.0.2.15 | 12.0.2.15 |
| netgear m4300-12x12f_firmware | v < 12.0.2.15 | 12.0.2.15 |
| netgear m4300-24x24f_firmware | v < 12.0.2.15 | 12.0.2.15 |
| netgear m4300-24x_firmware | v < 12.0.2.15 | 12.0.2.15 |
| netgear m4300-48x_firmware | v < 12.0.2.15 | 12.0.2.15 |
| netgear m4200_firmware | v < 12.0.2.15 | 12.0.2.15 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.