HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2017-18863

CVSS 7.1v3.1pub. 2020-04-28upd. 2024-11-21

Certain NETGEAR devices are affected by command execution via a PHP form. This affects WN604 3.3.3 and earlier, WNAP210v2 3.5.20.0 and earlier, WNAP320 3.5.20.0 and earlier, WNDAP350 3.5.20.0 and earlier, WNDAP360 3.5.20.0 and earlier, WNDAP620 2.0.11 and earlier, WNDAP660 3.5.20.0 and earlier, WND930 2.0.11 and earlier, and WAC120 2.0.7 and earlier.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

  • Netgear Wac120

    HW
    Netgear
    all versions

  • Netgear Wac120 Firmware

    OS
    Netgear
    < 2.0.7

  • Netgear Wn604

    HW
    Netgear
    all versions

  • Netgear Wn604 Firmware

    OS
    Netgear
    < 3.3.3

  • Netgear Wnap210

    HW
    Netgear
    v2

  • Netgear Wnap210 Firmware

    OS
    Netgear
    < 3.5.20.0

  • Netgear Wnap320

    HW
    Netgear
    all versions

  • Netgear Wnap320 Firmware

    OS
    Netgear
    < 3.5.20.0

  • Netgear Wnd930

    HW
    Netgear
    all versions

  • Netgear Wnd930 Firmware

    OS
    Netgear
    < 2.0.11

  • Netgear Wndap350

    HW
    Netgear
    all versions

  • Netgear Wndap350 Firmware

    OS
    Netgear
    < 3.5.20.0

  • Netgear Wndap360

    HW
    Netgear
    all versions

  • Netgear Wndap360 Firmware

    OS
    Netgear
    < 3.5.20.0

  • Netgear Wndap620

    HW
    Netgear
    all versions

  • Netgear Wndap620 Firmware

    OS
    Netgear
    < 2.0.11

  • Netgear Wndap660

    HW
    Netgear
    all versions

  • Netgear Wndap660 Firmware

    OS
    Netgear
    < 3.5.20.0
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2016-1555CRITICAL9.8⚠ KEVPL ✓same product

Command injection w firmwarze Netgear — zdalne wykonanie kodu

CVE-2018-21097CRITICAL9.8PL ✓same product

Stack-based buffer overflow w urządzeniach NETGEAR (punkty dostępowe Wi-Fi)

CVE-2016-1557CRITICAL9.8PL ✓same product

Netgear WNAP320/WNDAP350/WNDAP360 — ujawnienie haseł przez SNMP

CVE-2018-21094HIGH7.3same product

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC120 befo...

CVE-2018-21096HIGH7.4same product

Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 ...