CVE-2017-18862
Medium
Description
Certain NETGEAR devices are affected by authentication bypass. This affects JGS516PE before 2017-05-11, JGS524Ev2 before 2017-05-11, JGS524PE before 2017-05-11, GS105Ev2 before 2017-05-11, GS105PE before 2017-05-11, GS108Ev3 before 2017-05-11, GS108PEv3 before 2017-05-11, GS116Ev2 before 2017-05-11, GSS108E before 2017-05-11, GSS116E before 2017-05-11, XS708Ev2 before 2017-05-11, and XS716E before 2017-05-11.
SeverityMedium
CVSS6.5
Exploit probability—
Product
Netgear Jgs516pe Firmware
PublishedApr 28, 2020
First seenApr 28, 2020
How to fix
Update
- netgear jgs516pe_firmware2017-05-11 or later
- netgear jgs524e_firmware2017-05-11 or later
- netgear jgs524pe_firmware2017-05-11 or later
- netgear gs105e_firmware2017-05-11 or later
- netgear gs105pe_firmware2017-05-11 or later
- netgear gs108e_firmware2017-05-11 or later
- netgear gs108pe_firmware2017-05-11 or later
- netgear gs116e_firmware2017-05-11 or later
- netgear gss108e_firmware2017-05-11 or later
- netgear gss116e_firmware2017-05-11 or later
- netgear xs708e_firmware2017-05-11 or later
- netgear xs716e_firmware2017-05-11 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netgear jgs516pe_firmware | v < 2017-05-11 | 2017-05-11 |
| netgear jgs524e_firmware | v < 2017-05-11 | 2017-05-11 |
| netgear jgs524pe_firmware | v < 2017-05-11 | 2017-05-11 |
| netgear gs105e_firmware | v < 2017-05-11 | 2017-05-11 |
| netgear gs105pe_firmware | v < 2017-05-11 | 2017-05-11 |
| netgear gs108e_firmware | v < 2017-05-11 | 2017-05-11 |
| netgear gs108pe_firmware | v < 2017-05-11 | 2017-05-11 |
| netgear gs116e_firmware | v < 2017-05-11 | 2017-05-11 |
| netgear gss108e_firmware | v < 2017-05-11 | 2017-05-11 |
| netgear gss116e_firmware | v < 2017-05-11 | 2017-05-11 |
| netgear xs708e_firmware | v < 2017-05-11 | 2017-05-11 |
| netgear xs716e_firmware | v < 2017-05-11 | 2017-05-11 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.