CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2018-21097

CVSS 9.8v3.1pub. 2020-04-27upd. 2024-11-21

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WAC120 before 2.1.7, WN604 before 3.3.10, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, and WND930 before 2.1.5.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Netgear Wac120

    HW
    Netgear
    all versions

  • Netgear Wac120 Firmware

    OS
    Netgear
    < 2.1.7

  • Netgear Wac505

    HW
    Netgear
    all versions

  • Netgear Wac505 Firmware

    OS
    Netgear
    < 5.0.5.4

  • Netgear Wac510

    HW
    Netgear
    all versions

  • Netgear Wac510 Firmware

    OS
    Netgear
    < 5.0.5.4

  • Netgear Wn604

    HW
    Netgear
    all versions

  • Netgear Wn604 Firmware

    OS
    Netgear
    < 3.3.10

  • Netgear Wnap210

    HW
    Netgear
    v2

  • Netgear Wnap210 Firmware

    OS
    Netgear
    < 3.7.11.4

  • Netgear Wnap320

    HW
    Netgear
    all versions

  • Netgear Wnap320 Firmware

    OS
    Netgear
    < 3.7.11.4

  • Netgear Wnd930

    HW
    Netgear
    all versions

  • Netgear Wnd930 Firmware

    OS
    Netgear
    < 2.1.5

  • Netgear Wndap350

    HW
    Netgear
    all versions

  • Netgear Wndap350 Firmware

    OS
    Netgear
    < 3.7.11.4

  • Netgear Wndap360

    HW
    Netgear
    all versions

  • Netgear Wndap360 Firmware

    OS
    Netgear
    < 3.7.11.4

  • Netgear Wndap620

    HW
    Netgear
    all versions

  • Netgear Wndap620 Firmware

    OS
    Netgear
    < 2.1.7

  • Netgear Wndap660

    HW
    Netgear
    all versions

  • Netgear Wndap660 Firmware

    OS
    Netgear
    < 3.7.11.4
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Auth BypassMemory
CWE
References

Related vulnerabilities

CVE-2016-1555CRITICAL9.8⚠ KEVPL ✓same product

Command injection w firmwarze Netgear — zdalne wykonanie kodu

CVE-2018-21133CRITICAL9.8PL ✓same product

Stack-based buffer overflow w NETGEAR WAC505/WAC510 bez uwierzytelnienia

CVE-2018-21132CRITICAL9.8PL ✓same product

Pominięcie uwierzytelnienia (Auth Bypass) w urządzeniach NETGEAR WAC505 i WAC510

CVE-2018-21131CRITICAL9.1PL ✓same product

NETGEAR WAC505/WAC510 — nieuwierzytelniony downgrade firmware

CVE-2016-1557CRITICAL9.8PL ✓same product

Netgear WNAP320/WNDAP350/WNDAP360 — ujawnienie haseł przez SNMP