HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2018-21096

CVSS 7.4v3.1pub. 2020-04-27upd. 2024-11-21

Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

  • Netgear Wac120

    HW
    Netgear
    all versions

  • Netgear Wac120 Firmware

    OS
    Netgear
    < 2.1.7

  • Netgear Wac505

    HW
    Netgear
    all versions

  • Netgear Wac505 Firmware

    OS
    Netgear
    < 5.0.5.4

  • Netgear Wac510

    HW
    Netgear
    all versions

  • Netgear Wac510 Firmware

    OS
    Netgear
    < 5.0.5.4

  • Netgear Wn604

    HW
    Netgear
    all versions

  • Netgear Wn604 Firmware

    OS
    Netgear
    < 3.3.10

  • Netgear Wnap210

    HW
    Netgear
    v2

  • Netgear Wnap210 Firmware

    OS
    Netgear
    < 3.7.11.4

  • Netgear Wnap320

    HW
    Netgear
    all versions

  • Netgear Wnap320 Firmware

    OS
    Netgear
    < 3.7.11.4

  • Netgear Wnd930

    HW
    Netgear
    all versions

  • Netgear Wnd930 Firmware

    OS
    Netgear
    < 2.1.5

  • Netgear Wndap350

    HW
    Netgear
    all versions

  • Netgear Wndap350 Firmware

    OS
    Netgear
    < 3.7.11.4

  • Netgear Wndap360

    HW
    Netgear
    all versions

  • Netgear Wndap360 Firmware

    OS
    Netgear
    < 3.7.11.4

  • Netgear Wndap620

    HW
    Netgear
    all versions

  • Netgear Wndap620 Firmware

    OS
    Netgear
    < 2.1.7

  • Netgear Wndap660

    HW
    Netgear
    all versions

  • Netgear Wndap660 Firmware

    OS
    Netgear
    < 3.7.11.4
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2016-1555CRITICAL9.8⚠ KEVPL ✓same product

Command injection w firmwarze Netgear — zdalne wykonanie kodu

CVE-2018-21097CRITICAL9.8PL ✓same product

Stack-based buffer overflow w urządzeniach NETGEAR (punkty dostępowe Wi-Fi)

CVE-2018-21132CRITICAL9.8PL ✓same product

Pominięcie uwierzytelnienia (Auth Bypass) w urządzeniach NETGEAR WAC505 i WAC510

CVE-2018-21131CRITICAL9.1PL ✓same product

NETGEAR WAC505/WAC510 — nieuwierzytelniony downgrade firmware

CVE-2018-21133CRITICAL9.8PL ✓same product

Stack-based buffer overflow w NETGEAR WAC505/WAC510 bez uwierzytelnienia