low3.7
CVE-2017-2137
ProSAFE Plus Configuration Utility prior to 2.3.29 allows remote attackers to bypass access restriction and change configurations of the switch via SOAP reques…
Impact
ProSAFE Plus Configuration Utility prior to 2.3.29 allows remote attackers to bypass access restriction and change configurations of the switch via SOAP requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | Prosafe Plus Configuration Utility | through 2.3.28 |
References
- NVD record
- CVE.org record
- http://jvn.jp/en/jp/JVN08740778/index.html
- https://kb.netgear.com/000038443/Security-Advisory-for-Insecure-SOAP-Access-in-ProSAFE-Plus-Configuration-Utility-PSV-2017-1997
- http://jvn.jp/en/jp/JVN08740778/index.html
- https://kb.netgear.com/000038443/Security-Advisory-for-Insecure-SOAP-Access-in-ProSAFE-Plus-Configuration-Utility-PSV-2017-1997