What is CVE-2017-18715?

CVE-2017-18715 is a medium-severity vulnerability in Netgear Ex3700, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2020-04-24.

How severe is CVE-2017-18715?

Medium severity. CVSS v3 base score is 6.1 out of 10.

XSS in Netgear Ex3700

CVE-2017-18715

Certain NETGEAR devices are affected by reflected XSS. This affects EX3700 before 1.0.0.66, EX3800 before 1.0.0.66, EX6100 before 1.0.2.20, EX6120 before 1.0.0.34, EX6150 before 1.0.0.36, EX6200 before 1.0.3.84, and EX7000 before 1.0.0.60.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.006 (47.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Netgear Ex3700
Netgear Ex3700_firmware
Netgear Ex3800
Netgear Ex3800_firmware
Netgear Ex6100
Netgear Ex6100_firmware
Netgear Ex6120
Netgear Ex6120_firmware
Netgear Ex6150
Netgear Ex6150_firmware

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-18715?: CVE-2017-18715 is a medium-severity vulnerability in Netgear Ex3700, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2020-04-24.
How severe is CVE-2017-18715?: Medium severity. CVSS v3 base score is 6.1 out of 10.