CVE:CVE-2017-18824
CNNVD:CNNVD-202004-1629
NETGEAR M4300-28G等都是美国网件（NETGEAR）公司的一款网管型交换机。
多款NETGEAR产品中存在路径遍历漏洞。该漏洞源于网络系统或产品未能正确地过滤资源或文件路径中的特殊元素。攻击者可利用该漏洞访问受限目录之外的位置。以下产品及版本受到影响：NETGEAR M4300-28G 12.0.2.15之前版本；M4300-52G 12.0.2.15之前版本；M4300-28G-POE+ 12.0.2.15之前版本；M4300-52G-POE+ 12.0.2.15之前版本；M4300-8X8F 12.0.2.15之前版本；M4300-12X12F 12.0.2.15之前版本；M4300-24X24F 12.0.2.15之前版本；M4300-24X 12.0.2.15之前版本；M4300-48X 12.0.2.15之前版本；M4200 12.0.2.15之前版本。
solution:Upgrade netgear m4300-28g_firmware to a higher version than 12.0.2.15,and avoid the version (,12.0.2.15); Upgrade netgear m4300-52g_firmware to a higher version than 12.0.2.15,and avoid the version (,12.0.2.15); Upgrade netgear m4300-28g-poe+_firmware to a higher version than 12.0.2.15,and avoid the version (,12.0.2.15); Upgrade netgear m4300-52g-poe+_firmware to a higher version than 12.0.2.15,and avoid the version (,12.0.2.15); Upgrade netgear m4300-8x8f_firmware to a higher version than 12.0.2.15,and avoid the version (,12.0.2.15); Upgrade netgear m4300-12x12f_firmware to a higher version than 12.0.2.15,and avoid the version (,12.0.2.15); Upgrade netgear m4300-24x24f_firmware to a higher version than 12.0.2.15,and avoid the version (,12.0.2.15); Upgrade netgear m4300-24x_firmware to a higher version than 12.0.2.15,and avoid the version (,12.0.2.15); Upgrade netgear m4300-48x_firmware to a higher version than 12.0.2.15,and avoid the version (,12.0.2.15); Upgrade netgear m4200_firmware to a higher version than 12.0.2.15,and avoid the version (,12.0.2.15)