Security readout for executives and security teams
Plain-English summary
This CVE covers a denial-of-service issue in specific NETGEAR fully managed switches. Affected devices could be disrupted, causing availability impact, but the provided data does not indicate data theft, data modification, or active exploitation.
Executive priority
Treat this as a moderate availability risk for environments dependent on affected NETGEAR switches. Prioritize remediation where outage impact would affect production, security monitoring, or critical network segments.
Technical view
CVE-2017-18840 affects multiple NETGEAR M4300 models and M4200 firmware before 12.0.2.15. The CVSS 3.0 vector is local, low complexity, no privileges, no user interaction, with high availability impact and no confidentiality or integrity impact.
Likely exposure
Exposure is most likely in organizations operating listed NETGEAR M4300 or M4200 switches below firmware 12.0.2.15. The CVSS vector indicates local attack conditions; the provided sources do not describe remote exploitability.
Exploitation context
CISA KEV status is false, and the supplied sources do not report active exploitation. The public details are limited to affected models, firmware threshold, and denial-of-service impact.
Researcher notes
The source bundle does not provide CWE mapping, root cause details, proof-of-concept status, or exploit mechanics. Analysis should remain bounded to the local CVSS vector and vendor-stated affected firmware versions.
Mitigation direction
- Inventory NETGEAR M4300 and M4200 switches in production and management networks.
- Upgrade affected devices to firmware 12.0.2.15 or later where supported by NETGEAR.
- Review the NETGEAR advisory before maintenance to confirm model-specific guidance.
- Restrict local and management access to switch infrastructure to trusted administrators.
Validation and detection
- Confirm each listed switch model and its running firmware version.
- Flag M4300 and M4200 devices running firmware earlier than 12.0.2.15.
- Check monitoring history for unexplained switch availability events.
- Document remediation status and any devices awaiting vendor-supported updates.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2017-18840 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 6.2 (3.0)
- Known Exploited
- No
- Published
Vector: CVSS:3.0/AC:L/AV:L/A:H/C:N/I:N/PR:N/S:U/UI:N
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.0/AC:L/AV:L/A:H/C:N/I:N/PR:N/S:U/UI:N2.53.6Primary CVE scoreVulnerability scoring details
Base CVSS 3.0 score
6.2MediumVector: CVSS:3.0/AC:L/AV:L/A:H/C:N/I:N/PR:N/S:U/UI:N
Source materials
- CVE List V5 sourceCVE List V5
- https://kb.netgear.com/000049022/Security-Advisory-for-Denial-of-Service-Vulnerability-on-Some-Fully-Managed-Switches-PSV-2017-2005CVE reference · x_refsource_CONFIRM
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.