CVE-2017-18840: netgear m4200_firmware Improper Input Validation

Vulnerability summary

CVE-2017-18840 is a medium (CVSS 6.2) Improper Input Validation vulnerability in netgear m4200_firmware. EPSS estimates a 0.30% chance of exploitation in the next 30 days, higher than 20.9% of scored vulnerabilities.

Timeline

1. 20-04-2020
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

Certain NETGEAR devices are affected by denial of service. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15.

• CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.