NETGEAR CM400 Firmware vulnerabilities

2 CVEs affecting NETGEAR CM400 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-18859, published 2020-04-28.

More from NETGEAR.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-18859, published 2020-04-28. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by slowdown/stoppage. This affects C6300 before 2017-05-30, CM400 before 2017-05-30, CM700 before 2017-05-30, and CMD31T before 2017-05-30.
• CVE-2016-11055, published 2020-04-28. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by CSRF. This affects CM400 before 2017-01-11, CM600 before 2017-01-11, D1500 before 2017-01-11, D500 before 2017-01-11, DST6501 before 2017-01-11, JNR1010v1…