CVE-2017-18862

—

CVSS 3.1

6.5 medium

EPSS

<1%p43

Published

Apr 28, 2020 (Apr 28, 2020)

Modified

Jun 17, 2026

Description

Certain NETGEAR devices are affected by authentication bypass. This affects JGS516PE before 2017-05-11, JGS524Ev2 before 2017-05-11, JGS524PE before 2017-05-11, GS105Ev2 before 2017-05-11, GS105PE before 2017-05-11, GS108Ev3 before 2017-05-11, GS108PEv3 before 2017-05-11, GS116Ev2 before 2017-05-11, GSS108E before 2017-05-11, GSS116E before 2017-05-11, XS708Ev2 before 2017-05-11, and XS716E before 2017-05-11.

Vendors: netgear
Products: jgs516pe firmware, jgs524e firmware, jgs524pe firmware, gs105e firmware, gs105pe firmware, gs108e firmware, gs108pe firmware, gs116e firmware, gss108e firmware, gss116e firmware, xs708e firmware, xs716e firmware
Weakness: CWE-287
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.