ZeroHour

CVE-2017-18832

CVSS 3.1
4.8 medium
EPSS
<1%p35
Published
()
Modified
Description

Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15.

Vendors
netgear
Products
m4300-28g firmware, m4300-52g firmware, m4300-28g-poe\+ firmware, m4300-52g-poe\+ firmware, m4300-8x8f firmware, m4300-12x12f firmware, m4300-24x24f firmware, m4300-24x firmware, m4300-48x firmware, m4200 firmware
Weakness
CWE-79
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

In the news

No ingested article mentions this CVE yet.