CVE-2017-5521VulnerabilityPublished 09/08/2022Updated 10/24/2026
CVE-2017-5521: NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability
Affects NETGEAR Multiple DevicesSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 09/08/2022
- KEV deadline
- 09/29/2022
- EPSS
- 89.4% chance of exploitation in 30 days – higher than 99% of CVEs
What to do
CISA required action
Apply updates per vendor instructions. If the affected device has since entered end-of-life, it should be disconnected if still in use.
Description
Multiple NETGEAR devices are prone to admin password disclosure via simple crafted requests to the web management server.