What is CVE-2017-18824?

CVE-2017-18824 is a low-severity vulnerability in NETGEAR M4200, classified under Path Traversal. CVSS score: 3.3/10. Published 2020-04-20.

How severe is CVE-2017-18824?

Low severity. CVSS v3 base score is 3.3 out of 10.

Path Traversal in NETGEAR M4200

CVE-2017-18824

Certain NETGEAR devices are affected by directory traversal. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.005 (40.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Weakness classification (CWE)

CWE-22 — Path Traversal

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-18824?: CVE-2017-18824 is a low-severity vulnerability in NETGEAR M4200, classified under Path Traversal. CVSS score: 3.3/10. Published 2020-04-20.
How severe is CVE-2017-18824?: Low severity. CVSS v3 base score is 3.3 out of 10.