CVE-2017-18805

published 2020-04-21

CVE-2017-18805: Certain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10, WAC120 before 2.1.4, WNDAP620 before 2.1.3, WND930 before…

Priority P4 33 medium 6.7 CVSS 3.1

AV L AC L PR H UI N S U C H I H A H

Certain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10, WAC120 before 2.1.4, WNDAP620 before 2.1.3, WND930 before 2.1.2, WN604 before 3.3.7, WNDAP660 before 3.7.4.0, WNDAP350 before 3.7.4.0, WNAP320 before 3.7.4.0, WNAP210v2 before 3.7.4.0, and WNDAP360 before 3.7.4.0.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
netgear	wac120_firmware	< 2.1.4	2.1.4
netgear	wac510_firmware	< 1.3.0.10	1.3.0.10
netgear	wn604_firmware	< 3.3.7	3.3.7
netgear	wnap210_firmware	< 3.7.4.0	3.7.4.0
netgear	wnap320_firmware	< 3.7.4.0	3.7.4.0
netgear	wnd930_firmware	< 2.1.2	2.1.2
netgear	wndap350_firmware	< 3.7.4.0	3.7.4.0
netgear	wndap360_firmware	< 3.7.4.0	3.7.4.0
netgear	wndap620_firmware	< 2.1.3	2.1.3
netgear	wndap660_firmware	< 3.7.4.0	3.7.4.0

CVSS provenance

nvd v3.1 6.7 MEDIUM CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

nvd v3.0 6.7 MEDIUM CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 4.6 MEDIUM AV:L/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-74