CVE-2017-18863: Certain NETGEAR devices are affected by command execution via a PHP form. This affects WN604 3.3.3 and earlier, WNAP210v2 3.5.20.0 and earlier, WNAP320…

PriorityP335high7.1CVSS 3.1

AVLACLPRLUINSUCHIHAN

EPSS

0.50%

39.3th percentile

Certain NETGEAR devices are affected by command execution via a PHP form. This affects WN604 3.3.3 and earlier, WNAP210v2 3.5.20.0 and earlier, WNAP320 3.5.20.0 and earlier, WNDAP350 3.5.20.0 and earlier, WNDAP360 3.5.20.0 and earlier, WNDAP620 2.0.11 and earlier, WNDAP660 3.5.20.0 and earlier, WND930 2.0.11 and earlier, and WAC120 2.0.7 and earlier.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
netgear	wac120_firmware	< 2.0.7	2.0.7
netgear	wn604_firmware	< 3.3.3	3.3.3
netgear	wnap210_firmware	< 3.5.20.0	3.5.20.0
netgear	wnap320_firmware	< 3.5.20.0	3.5.20.0
netgear	wnd930_firmware	< 2.0.11	2.0.11
netgear	wndap350_firmware	< 3.5.20.0	3.5.20.0
netgear	wndap360_firmware	< 3.5.20.0	3.5.20.0
netgear	wndap620_firmware	< 2.0.11	2.0.11
netgear	wndap660_firmware	< 3.5.20.0	3.5.20.0

CVSS provenance

nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

nvdv2.03.6LOWAV:L/AC:L/Au:N/C:P/I:P/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.