CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2018-21131

CVSS 9.1v3.1pub. 2020-04-23upd. 2024-11-21

Certain NETGEAR devices are affected by unauthenticated firmware downgrade. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

  • Netgear Wac505

    HW
    Netgear
    all versions

  • Netgear Wac505 Firmware

    OS
    Netgear
    < 5.0.0.17

  • Netgear Wac510

    HW
    Netgear
    all versions

  • Netgear Wac510 Firmware

    OS
    Netgear
    < 5.0.0.17
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2018-21097CRITICAL9.8PL ✓same product

Stack-based buffer overflow w urządzeniach NETGEAR (punkty dostępowe Wi-Fi)

CVE-2018-21133CRITICAL9.8PL ✓same product

Stack-based buffer overflow w NETGEAR WAC505/WAC510 bez uwierzytelnienia

CVE-2018-21132CRITICAL9.8PL ✓same product

Pominięcie uwierzytelnienia (Auth Bypass) w urządzeniach NETGEAR WAC505 i WAC510

CVE-2018-21094HIGH7.3same product

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC120 befo...

CVE-2018-21096HIGH7.4same product

Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 ...