CRITICAL🇵🇱 Wersja polska

CVE-2016-1557

CVSS 9.8v3.0pub. 2017-04-21upd. 2026-05-13

Netgear WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0 reveal wireless passwords and administrative usernames and passwords over SNMP.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Netgear Wnap320

    HW
    Netgear
    all versions

  • Netgear Wnap320 Firmware

    OS
    Netgear
    ≤ 3.0.5.0

  • Netgear Wndap350

    HW
    Netgear
    all versions

  • Netgear Wndap350 Firmware

    OS
    Netgear
    ≤ 3.0.5.0

  • Netgear Wndap360

    HW
    Netgear
    all versions

  • Netgear Wndap360 Firmware

    OS
    Netgear
    ≤ 3.0.5.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2016-1555CRITICAL9.8⚠ KEVPL ✓same product

Command injection w firmwarze Netgear — zdalne wykonanie kodu

CVE-2018-21097CRITICAL9.8PL ✓same product

Stack-based buffer overflow w urządzeniach NETGEAR (punkty dostępowe Wi-Fi)

CVE-2017-18863HIGH7.1same product

Certain NETGEAR devices are affected by command execution via a PHP form. This affects WN604 3.3.3 and earlier...

CVE-2018-21094HIGH7.3same product

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC120 befo...

CVE-2018-21096HIGH7.4same product

Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 ...