CVEvulnerability

CVE-2017-18863

7.1 HIGH Published 2020-04-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-04-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS 2.0 ([email protected])
3.6 LOW — AV:L/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
CWE-74

Description

Certain NETGEAR devices are affected by command execution via a PHP form. This affects WN604 3.3.3 and earlier, WNAP210v2 3.5.20.0 and earlier, WNAP320 3.5.20.0 and earlier, WNDAP350 3.5.20.0 and earlier, WNDAP360 3.5.20.0 and earlier, WNDAP620 2.0.11 and earlier, WNDAP660 3.5.20.0 and earlier, WND930 2.0.11 and earlier, and WAC120 2.0.7 and earlier.

Affected configurations

• netgear wn604 firmware (< 3.3.3) • netgear wnap210 firmware (< 3.5.20.0) • netgear wnap320 firmware (< 3.5.20.0) • netgear wndap350 firmware (< 3.5.20.0) • netgear wndap360 firmware (< 3.5.20.0) • netgear wndap620 firmware (< 2.0.11) • netgear wndap660 firmware (< 3.5.20.0) • netgear wnd930 firmware (< 2.0.11) • netgear wac120 firmware (< 2.0.7)

Related

Weakness · CWE (1)

  • CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness

References