Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-21120

Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10.

Published

2020-04-22T16:15:11.903

Last Modified

2024-11-21T04:02:56.987

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.0 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

6.8

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-352
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System netgear wac120_firmware < 2.1.7 Yes
Hardware netgear wac120 - No
Operating System netgear wac505_firmware < 5.0.5.4 Yes
Hardware netgear wac505 - No
Operating System netgear wac510_firmware < 5.0.5.4 Yes
Hardware netgear wac510 - No
Operating System netgear wnap320_firmware < 3.7.11.4 Yes
Hardware netgear wnap320 - No
Operating System netgear wnap210_firmware < 3.7.11.4 Yes
Hardware netgear wnap210 v2 No
Operating System netgear wndap350_firmware < 3.7.11.4 Yes
Hardware netgear wndap350 - No
Operating System netgear wndap360_firmware < 3.7.11.4 Yes
Hardware netgear wndap360 - No
Operating System netgear wndap660_firmware < 3.7.11.4 Yes
Hardware netgear wndap660 - No
Operating System netgear wndap620_firmware < 2.1.7 Yes
Hardware netgear wndap620 - No
Operating System netgear wnd930_firmware < 2.1.5 Yes
Hardware netgear wnd930 - No
Operating System netgear wn604_firmware < 3.3.10 Yes
Hardware netgear wn604 - No
References