Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-21097

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WAC120 before 2.1.7, WN604 before 3.3.10, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, and WND930 before 2.1.5.

Published

2020-04-27T16:15:12.710

Last Modified

2024-11-21T04:02:53.660

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-787
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System netgear wac505_firmware < 5.0.5.4 Yes
Hardware netgear wac505 - No
Operating System netgear wac510_firmware < 5.0.5.4 Yes
Hardware netgear wac510 - No
Operating System netgear wac120_firmware < 2.1.7 Yes
Hardware netgear wac120 - No
Operating System netgear wn604_firmware < 3.3.10 Yes
Hardware netgear wn604 - No
Operating System netgear wnap320_firmware < 3.7.11.4 Yes
Hardware netgear wnap320 - No
Operating System netgear wnap210_firmware < 3.7.11.4 Yes
Hardware netgear wnap210 v2 No
Operating System netgear wndap350_firmware < 3.7.11.4 Yes
Hardware netgear wndap350 - No
Operating System netgear wndap360_firmware < 3.7.11.4 Yes
Hardware netgear wndap360 - No
Operating System netgear wndap660_firmware < 3.7.11.4 Yes
Hardware netgear wndap660 - No
Operating System netgear wndap620_firmware < 2.1.7 Yes
Hardware netgear wndap620 - No
Operating System netgear wnd930_firmware < 2.1.5 Yes
Hardware netgear wnd930 - No
References