CVE-2017-18838 describes a privilege escalation vulnerability affecting several NETGEAR M4300 and M4200 series network switches running firmware versions prior to 12.0.2.15. The vulnerability carries a CVSS v3.1 score of 7.8 (High), indicating that a local, low-privileged attacker can achieve high impact on confidentiality, integrity, and availability with low attack complexity. While the vulnerability has a high FAUCET Risk Score of 56/100, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage. Organizations utilizing the affected NETGEAR devices should prioritize patching to the recommended firmware version to mitigate this risk.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 12.0.2.15CPE matchmatch criteria | cpe:2.3:o:netgear:m4300-28g_firmware:*:*:*:*:*:*:*:* | ||
< 12.0.2.15CPE matchmatch criteria | cpe:2.3:o:netgear:m4300-52g_firmware:*:*:*:*:*:*:*:* | ||
< 12.0.2.15CPE matchmatch criteria | cpe:2.3:o:netgear:m4300-28g-poe\+_firmware:*:*:*:*:*:*:*:* | ||
< 12.0.2.15CPE matchmatch criteria | cpe:2.3:o:netgear:m4300-52g-poe\+_firmware:*:*:*:*:*:*:*:* | ||
< 12.0.2.15CPE matchmatch criteria | cpe:2.3:o:netgear:m4300-8x8f_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.