CVEvulnerability

CVE-2017-18805

6.7 MEDIUM Published 2020-04-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-04-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0 ([email protected])
6.7 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-74

Description

Certain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10, WAC120 before 2.1.4, WNDAP620 before 2.1.3, WND930 before 2.1.2, WN604 before 3.3.7, WNDAP660 before 3.7.4.0, WNDAP350 before 3.7.4.0, WNAP320 before 3.7.4.0, WNAP210v2 before 3.7.4.0, and WNDAP360 before 3.7.4.0.

Affected configurations

• netgear wac510 firmware (< 1.3.0.10) • netgear wac120 firmware (< 2.1.4) • netgear wndap620 firmware (< 2.1.3) • netgear wnd930 firmware (< 2.1.2) • netgear wn604 firmware (< 3.3.7) • netgear wndap660 firmware (< 3.7.4.0) • netgear wndap350 firmware (< 3.7.4.0) • netgear wnap320 firmware (< 3.7.4.0) • netgear wnap210 firmware (< 3.7.4.0) • netgear wndap360 firmware (< 3.7.4.0)

Related

Weakness · CWE (1)

  • CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness

References