CVE-2017-18862: NETGEAR GS105E Firmware

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Certain NETGEAR devices are affected by authentication bypass. This affects JGS516PE before 2017-05-11, JGS524Ev2 before 2017-05-11, JGS524PE before 2017-05-11, GS105Ev2 before 2017-05-11, GS105PE before 2017-05-11, GS108Ev3 before 2017-05-11, GS108PEv3 before 2017-05-11, GS116Ev2 before 2017-05-11, GSS108E before 2017-05-11, GSS116E before 2017-05-11, XS708Ev2 before 2017-05-11, and XS716E before 2017-05-11.

Affected products

• NETGEAR GS105E Firmware: before 2017-05-11 (fixed in 2017-05-11)
• NETGEAR GS105PE Firmware: before 2017-05-11 (fixed in 2017-05-11)
• NETGEAR GS108E Firmware: before 2017-05-11 (fixed in 2017-05-11)
• NETGEAR GS108PE Firmware: before 2017-05-11 (fixed in 2017-05-11)
• NETGEAR GS116E Firmware: before 2017-05-11 (fixed in 2017-05-11)
• NETGEAR GSS108E Firmware: before 2017-05-11 (fixed in 2017-05-11)
• NETGEAR GSS116E Firmware: before 2017-05-11 (fixed in 2017-05-11)
• NETGEAR JGS516PE Firmware: before 2017-05-11 (fixed in 2017-05-11)
• NETGEAR JGS524E Firmware: before 2017-05-11 (fixed in 2017-05-11)
• NETGEAR JGS524PE Firmware: before 2017-05-11 (fixed in 2017-05-11)
• NETGEAR XS708E Firmware: before 2017-05-11 (fixed in 2017-05-11)
• NETGEAR XS716E Firmware: before 2017-05-11 (fixed in 2017-05-11)

Published 2020-04-28. Last modified 2026-06-17.