CRITICAL✓ PATCH🇬🇧 English

CVE-2021-35973

CVSS 9.8v3.1pub. 2021-06-30upd. 2024-11-21

NETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/mini_httpd, allowing an unauthenticated attacker to invoke any action by adding the &currentsetting.htm substring to the HTTP query, a related issue to CVE-2020-27866. This directly allows the attacker to change the web UI password, and eventually to enable debug mode (telnetd) and gain a shell on the device as the admin limited-user account (however, escalation to root is simple because of weak permissions on the /etc/ directory).

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Netgear Wac104

    HW
    Netgear
    wszystkie wersje

  • Netgear Wac104 Firmware

    OS
    Netgear
    < 1.0.4.15
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
Auth Bypass
CWE
Referencje

Powiązane podatności

CVE-2021-44262HIGH7.5ten sam produkt

A vulnerability is in the 'MNU_top.htm' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a ...

CVE-2020-35788HIGH7.6ten sam produkt

NETGEAR WAC104 devices before 1.0.4.13 are affected by a buffer overflow by an authenticated user.

CVE-2021-44261MEDIUM5.3ten sam produkt

A vulnerability is in the 'BRS_top.html' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a...

CVE-2021-38532MEDIUM6.8ten sam produkt

NETGEAR WAC104 devices before 1.0.4.15 are affected by incorrect configuration of security settings.

CVE-2020-26919CRITICAL9.8⚠ KEVten sam vendor

NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level.