NETGEAR m4300-24x24f Firmware vulnerabilities

21 CVEs affecting NETGEAR m4300-24x24f Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-18858, published 2020-04-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-18858, published 2020-04-28. Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by command execution. This affects M4200-10MG-POE+ 12.0.2.11 and earlier, M4300-28G 12.0.2.11 and earlier, M4300-52G 12.0.2.11 and earlier, M4300-28G-POE+…
CVE-2017-18835, published 2020-04-20. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by reflected XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15,…
CVE-2017-18833, published 2020-04-20. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by reflected XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15,…
CVE-2017-18831, published 2020-04-20. Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F…
CVE-2017-18834, published 2020-04-20. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by reflected XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15,…
CVE-2017-18821, published 2020-04-21. Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F…
CVE-2017-18824, published 2020-04-20. Low severity, CVSS 3.3. EPSS: 0.5% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by directory traversal. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15,…
CVE-2017-18832, published 2020-04-20. Medium severity, CVSS 4.8. EPSS: 0.4% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F…
CVE-2017-18828, published 2020-04-20. Medium severity, CVSS 4.8. EPSS: 0.4% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F…
CVE-2017-18827, published 2020-04-20. Medium severity, CVSS 4.8. EPSS: 0.4% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F…

Latest

CVE-2017-18837, published 2020-04-20. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before…
CVE-2017-18836, published 2020-04-20. Medium severity, CVSS 6.2. EPSS: 0.4% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by denial of service. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15,…
CVE-2017-18830, published 2020-04-20. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before…