Unscored CVE-2017-2137 EUVD-2017-11320GHSA-2q27-j7fh-rmh2

ProSAFE Plus Configuration Utility prior to 2.3.29 allows remote attackers to bypass access restriction and change configurations of the sw…

Published Apr 28, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Description

ProSAFE Plus Configuration Utility prior to 2.3.29 allows remote attackers to bypass access restriction and change configurations of the switch via SOAP requests.

References

https://kb.netgear.com/000038443/Security-Advisory-for-Insecure-SOAP-Access-in-ProSAFE-Plus-Configuration-Utility-PSV-2017-1997
JVN#08740778 third-party-advisory