CVE:CVE-2017-18862
CNNVD:CNNVD-202004-2261
NETGEAR GS105E等都是美国网件（NETGEAR）公司的一款交换机。
多款NETGEAR产品中存在安全漏洞。攻击者可利用该漏洞绕过身份验证，获取交换机配置文件和密码的访问权限（同一子网）。以下产品及版本受到影响：NETGEAR JGS516PE 2017-05-11之前版本；JGS524Ev2 2017-05-11之前版本；JGS524PE 2017-05-11之前版本；GS105Ev2 2017-05-11之前版本；GS105PE 2017-05-11之前版本；GS108Ev3 2017-05-11之前版本；GS108PEv3 2017-05-11之前版本；GS116Ev2 2017-05-11之前版本；GSS108E 2017-05-11之前版本；GSS116E 2017-05-11之前版本；XS708Ev2 2017-05-11之前版本；XS716E 2017-05-11之前版本。
solution:Upgrade netgear jgs516pe_firmware to a higher version than 2017-05-11,and avoid the version (,2017-05-11); Upgrade netgear jgs524e_firmware to a higher version than 2017-05-11,and avoid the version (,2017-05-11); Upgrade netgear jgs524pe_firmware to a higher version than 2017-05-11,and avoid the version (,2017-05-11); Upgrade netgear gs105e_firmware to a higher version than 2017-05-11,and avoid the version (,2017-05-11); Upgrade netgear gs105pe_firmware to a higher version than 2017-05-11,and avoid the version (,2017-05-11); Upgrade netgear gs108e_firmware to a higher version than 2017-05-11,and avoid the version (,2017-05-11); Upgrade netgear gs108pe_firmware to a higher version than 2017-05-11,and avoid the version (,2017-05-11); Upgrade netgear gs116e_firmware to a higher version than 2017-05-11,and avoid the version (,2017-05-11); Upgrade netgear gss108e_firmware to a higher version than 2017-05-11,and avoid the version (,2017-05-11); Upgrade netgear gss116e_firmware to a higher version than 2017-05-11,and avoid the version (,2017-05-11); Upgrade netgear xs708e_firmware to a higher version than 2017-05-11,and avoid the version (,2017-05-11); Upgrade netgear xs716e_firmware to a higher version than 2017-05-11,and avoid the version (,2017-05-11)