{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-18T13:51:35.942","vulnerabilities":[{"cve":{"id":"CVE-2017-18837","sourceIdentifier":"cve@mitre.org","published":"2020-04-20T17:15:15.133","lastModified":"2024-11-21T03:21:03.163","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15."},{"lang":"es","value":"Determinados dispositivos NETGEAR, están afectados por una escalada de privilegios vertical. Esto afecta a M4300-28G versiones anteriores a 12.0.2.15, M4300-52G versiones anteriores a 12.0.2.15, M4300-28G-POE+ versiones anteriores a 12.0.2.15, M4300-52G-POE+ versiones anteriores a 12.0.2.15, M4300-8X8F versiones anteriores a 12. 0.2.15, M4300-12X12F versiones anteriores a 12.0.2.15, M4300-24X24F versiones anteriores a 12.0.2.15, M4300-24X versiones anteriores a 12.0.2.15, M4300-48X versiones anteriores a 12.0.2.15, y M4200 versiones anteriores a 12.0.2.15."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV30":[{"source":"cve@mitre.org","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:m4300-28g_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.0.2.15","matchCriteriaId":"6835F5FD-7580-43C9-AC0C-523018CFA9C9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:m4300-28g:-:*:*:*:*:*:*:*","matchCriteriaId":"22DDB059-D64B-40D1-8CD7-0FE7CF387349"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:m4300-52g_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.0.2.15","matchCriteriaId":"D983754E-20CE-4AA1-8476-4FB254DD06F6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:m4300-52g:-:*:*:*:*:*:*:*","matchCriteriaId":"AC1FD426-FA6B-4F84-8A21-74B80E8A03ED"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:m4300-28g-poe\\+_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.0.2.15","matchCriteriaId":"AFB4FD85-794A-45FC-9515-395FA0335472"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:m4300-28g-poe\\+:-:*:*:*:*:*:*:*","matchCriteriaId":"6EDB8A1F-8F4F-4E8F-8CAF-8E05AC84BE52"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:m4300-52g-poe\\+_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.0.2.15","matchCriteriaId":"76DE6248-6808-48E3-B06F-5D606F70219D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:m4300-52g-poe\\+:-:*:*:*:*:*:*:*","matchCriteriaId":"4FEA4098-F34F-4EDE-976D-6E63EA2EA3DB"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:m4300-8x8f_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.0.2.15","matchCriteriaId":"BE7CAC30-97D2-4576-9669-52864912661B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:m4300-8x8f:-:*:*:*:*:*:*:*","matchCriteriaId":"ED3BE1A4-2683-4890-BC75-8F7ADEC9AF25"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:m4300-12x12f_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.0.2.15","matchCriteriaId":"DFD98F80-65E8-430E-909A-51F0157F90F9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:m4300-12x12f:-:*:*:*:*:*:*:*","matchCriteriaId":"35193973-3D2B-4751-899A-F0270E9F91A5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:m4300-24x24f_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.0.2.15","matchCriteriaId":"8CD54FE5-F998-4134-A824-0E385A5F2B82"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:m4300-24x24f:-:*:*:*:*:*:*:*","matchCriteriaId":"68762E4C-8D20-44B7-873C-6EC849577551"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:m4300-24x_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.0.2.15","matchCriteriaId":"44DDD172-CA07-4D0B-8368-1C6B434508DC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:m4300-24x:-:*:*:*:*:*:*:*","matchCriteriaId":"552CC93D-334C-4919-9906-688216580DF0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:m4300-48x_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.0.2.15","matchCriteriaId":"4F1D3514-4B20-48C6-92E4-CE33D9F73291"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:m4300-48x:-:*:*:*:*:*:*:*","matchCriteriaId":"A74F426D-BD60-4F6F-A1AA-8547CDAA2DF3"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:m4200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.0.2.15","matchCriteriaId":"392C3C95-7BAA-4A4C-9123-0BF4B27E519F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:m4200:-:*:*:*:*:*:*:*","matchCriteriaId":"80617DBE-44F0-44E1-B59A-9456D4995C8B"}]}]}],"references":[{"url":"https://kb.netgear.com/000049025/Security-Advisory-for-Vertical-Privilege-Escalation-on-Some-Fully-Managed-Switches-PSV-2017-1973","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://kb.netgear.com/000049025/Security-Advisory-for-Vertical-Privilege-Escalation-on-Some-Fully-Managed-Switches-PSV-2017-1973","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}