Is CVE-2017-18824 actively exploited?

No active exploitation of CVE-2017-18824 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2017-18824 be exploited remotely?

No. CVE-2017-18824 requires local access to exploit.

What is the CVSS score of CVE-2017-18824?

CVE-2017-18824 has a CVSS score of 3.3 (LOW).

HOME VULNERABILITIESCVE-2017-18824

LOW

CVE-2017-18824

CWE-22Published: April 20, 2020· Updated: Jun 17, 2026

3.3

CVSS v3.1

Official Description

Certain NETGEAR devices are affected by directory traversal. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15.

NVD Source

Technical Analysis

CVE-2017-18824 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges Req.Low

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityLow

IntegrityNone

AvailabilityNone

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected Vendors & Products

netgear20 product(s)

m4300-28g firmwarem4300-28gm4300-52g firmwarem4300-52gm4300-28g-poe\+ firmwarem4300-28g-poe\+m4300-52g-poe\+ firmwarem4300-52g-poe\+m4300-8x8f firmwarem4300-8x8fm4300-12x12f firmwarem4300-12x12f+8

Source: NVD CPE · 20 total CPE entries