Security readout for executives and security teams
Plain-English summary
This CVE is a stored cross-site scripting issue in NETGEAR ReadyNAS OS 6 before version 6.8.0. An attacker with high privileges and local access could store content that later runs script in another user's browser after interaction. Business urgency is moderate unless older ReadyNAS devices remain in use or management access is broadly exposed.
Executive priority
Treat this as a moderate-priority legacy appliance issue. It is not presented as actively exploited, but outdated storage appliances can become durable internal risk. Prioritize upgrade or isolation for any ReadyNAS OS 6 device below 6.8.0.
Technical view
CVE-2017-18811 affects NETGEAR ReadyNAS OS 6 versions prior to 6.8.0. CVSS 3.0 is 5.2 with local attack vector, low complexity, high privileges required, user interaction required, changed scope, and low confidentiality, integrity, and availability impacts. The source bundle identifies stored XSS but does not provide CWE detail or exploit procedure.
Likely exposure
Exposure is likely limited to organizations still running ReadyNAS OS 6 before 6.8.0. Risk rises where ReadyNAS management interfaces are reachable by many internal users or privileged NAS users are not tightly controlled.
Exploitation context
The source bundle does not show CISA KEV listing or active exploitation evidence. The CVSS vector indicates exploitation requires local access, high privileges, and user interaction, which reduces broad internet-scale risk but does not remove insider or compromised-account concerns.
Researcher notes
The public bundle is sparse: it names stored XSS, ReadyNAS OS 6 before 6.8.0, and CVSS 5.2, but provides no CWE, vulnerable parameter, exploit path, or detailed fix text. Avoid assuming broader NETGEAR product impact beyond the cited ReadyNAS OS 6 advisory.
Mitigation direction
- Upgrade affected ReadyNAS OS 6 devices to 6.8.0 or later where supported.
- Review the NETGEAR advisory for model-specific guidance and support status.
- Restrict ReadyNAS management access to trusted administrative networks.
- Limit privileged NAS accounts to users with a current operational need.
- Monitor vendor guidance if devices cannot be upgraded.
Validation and detection
- Inventory ReadyNAS OS 6 devices and record installed firmware versions.
- Flag any ReadyNAS OS 6 device running a version before 6.8.0.
- Confirm management interfaces are not exposed beyond trusted administrative access.
- Review privileged account lists for unnecessary or stale access.
- Check vendor advisory details against each deployed device model.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2017-18811 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 5.2 (3.0)
- Known Exploited
- No
- Published
Vector: CVSS:3.0/AC:L/AV:L/A:L/C:L/I:L/PR:H/S:C/UI:R
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.0/AC:L/AV:L/A:L/C:L/I:L/PR:H/S:C/UI:R1.13.7Primary CVE scoreVulnerability scoring details
Base CVSS 3.0 score
5.2MediumVector: CVSS:3.0/AC:L/AV:L/A:L/C:L/I:L/PR:H/S:C/UI:R
Source materials
- CVE List V5 sourceCVE List V5
- https://kb.netgear.com/000049054/Security-Advisory-for-Stored-Cross-Site-Scripting-Vulnerability-on-Some-ReadyNAS-Devices-PSV-2017-0299CVE reference · x_refsource_CONFIRM
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.