Netgear Wac510 Firmware vulnerabilities

28 known vulnerabilities affecting netgear/wac510_firmware.

Total CVEs

CISA KEV

Public exploits

Exploited in wild

Severity breakdown

CRITICAL4HIGH11MEDIUM13

Vulnerabilities

Page 1 of 2

CVE-2018-21097CRITICALCVSS 9.8fixed in 5.0.5.42020-04-27

CVE-2018-21097 [CRITICAL] CWE-787 CVE-2018-21097: Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WAC120 before 2.1.7, WN604 before 3.3.10, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before

nvd

CVE-2018-21096HIGHCVSS 7.4fixed in 5.0.5.42020-04-27

CVE-2018-21096 [HIGH] CWE-352 CVE-2018-21096: Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5. Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10.

nvd

CVE-2018-21094HIGHCVSS 7.3fixed in 5.0.5.42020-04-27

CVE-2018-21094 [HIGH] CVE-2018-21094: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects W Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.

nvd

CVE-2018-21131CRITICALCVSS 9.1fixed in 5.0.0.172020-04-23

CVE-2018-21131 [CRITICAL] CVE-2018-21131: Certain NETGEAR devices are affected by unauthenticated firmware downgrade. This affects WAC505 befo Certain NETGEAR devices are affected by unauthenticated firmware downgrade. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.

nvd

CVE-2018-21132CRITICALCVSS 9.8fixed in 5.0.0.172020-04-23

CVE-2018-21132 [CRITICAL] CWE-306 CVE-2018-21132: Certain NETGEAR devices are affected by authentication bypass. This affects WAC505 before 5.0.0.17 a Certain NETGEAR devices are affected by authentication bypass. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.

nvd

CVE-2018-21133CRITICALCVSS 9.8fixed in 5.0.0.172020-04-23

CVE-2018-21133 [CRITICAL] CWE-787 CVE-2018-21133: Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.

nvd

CVE-2018-21130HIGHCVSS 8.8fixed in 5.0.0.172020-04-22

CVE-2018-21130 [HIGH] CWE-78 CVE-2018-21130: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affec Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.

nvd

CVE-2018-21127HIGHCVSS 8.8fixed in 5.0.0.172020-04-22

CVE-2018-21127 [HIGH] CWE-78 CVE-2018-21127: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affec Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.

nvd

CVE-2018-21126HIGHCVSS 8.8fixed in 5.0.0.172020-04-22

CVE-2018-21126 [HIGH] CWE-78 CVE-2018-21126: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affec Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.

nvd

CVE-2018-21125HIGHCVSS 8.8fixed in 5.0.0.172020-04-22

CVE-2018-21125 [HIGH] CWE-287 CVE-2018-21125: NETGEAR WAC510 devices before 5.0.0.17 are affected by authentication bypass. NETGEAR WAC510 devices before 5.0.0.17 are affected by authentication bypass.

nvd

CVE-2018-21124HIGHCVSS 8.8fixed in 5.0.0.172020-04-22

CVE-2018-21124 [HIGH] CWE-269 CVE-2018-21124: NETGEAR WAC510 devices before 5.0.0.17 are affected by privilege escalation. NETGEAR WAC510 devices before 5.0.0.17 are affected by privilege escalation.

nvd

CVE-2018-21120HIGHCVSS 8.0fixed in 5.0.5.42020-04-22

CVE-2018-21120 [HIGH] CWE-352 CVE-2018-21120: Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5. Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10.

nvd

CVE-2018-21128HIGHCVSS 8.8fixed in 5.0.0.172020-04-22

CVE-2018-21128 [HIGH] CWE-287 CVE-2018-21128: Certain NETGEAR devices are affected by authentication bypass. This affects WAC505 before 5.0.0.17 a Certain NETGEAR devices are affected by authentication bypass. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.

nvd

CVE-2018-21119MEDIUMCVSS 6.8fixed in 5.0.5.42020-04-22

CVE-2018-21119 [MEDIUM] CWE-74 CVE-2018-21119: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WAC Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WAC505 before 5.0.5.4 and WAC510 before 5.0.5.4.

nvd

CVE-2018-21129MEDIUMCVSS 6.5fixed in 5.0.0.172020-04-22

CVE-2018-21129 [MEDIUM] CWE-200 CVE-2018-21129: Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WAC505 bef Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.

nvd

CVE-2017-18805MEDIUMCVSS 6.7fixed in 1.3.0.102020-04-21

CVE-2017-18805 [MEDIUM] CWE-74 CVE-2017-18805: Certain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10, WAC1 Certain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10, WAC120 before 2.1.4, WNDAP620 before 2.1.3, WND930 before 2.1.2, WN604 before 3.3.7, WNDAP660 before 3.7.4.0, WNDAP350 before 3.7.4.0, WNAP320 before 3.7.4.0, WNAP210v2 before 3.7.4.0, and WNDAP360 before 3.7.4.0.

nvd

CVE-2017-18806MEDIUMCVSS 6.7fixed in 1.3.0.102020-04-21

CVE-2017-18806 [MEDIUM] CWE-74 CVE-2017-18806: Certain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10, WAC1 Certain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10, WAC120 before 2.1.4, WNDAP620 before 2.1.3, WND930 before 2.1.2, WN604 before 3.3.7, WNDAP660 before 3.7.4.0, WNDAP350 before 3.7.4.0, WNAP320 before 3.7.4.0, WNAP210v2 before 3.7.4.0, and WNDAP360 before 3.7.4.0.

nvd

CVE-2019-20696HIGHCVSS 7.5fixed in 5.6.8.32020-04-16

CVE-2019-20696 [HIGH] CVE-2019-20696: Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WAC505 bef Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WAC505 before V5.6.8.3 and WAC510 before V5.6.8.3.

nvd

CVE-2019-20741MEDIUMCVSS 6.5fixed in 5.0.10.22020-04-16

CVE-2019-20741 [MEDIUM] CVE-2019-20741: NETGEAR WAC510 devices before 5.0.10.2 are affected by disclosure of sensitive information. NETGEAR WAC510 devices before 5.0.10.2 are affected by disclosure of sensitive information.

nvd

CVE-2019-20698MEDIUMCVSS 6.5fixed in 8.0.5.52020-04-16

CVE-2019-20698 [MEDIUM] CVE-2019-20698: Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WAC505 bef Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WAC505 before 8.0.5.5 and WAC510 before 8.0.5.5.

nvd

1 / 2Next →