Lucene search

[email protected]CVE-2017-18805

HistoryApr 21, 2020 - 6:15 p.m.

CVE-2017-18805

2020-04-2118:15:12

CWE-74

[email protected]

web.nvd.nist.gov

cve-2017-18805

netgear

command injection

wac510

wac120

wndap620

wnd930

wn604

wndap660

wndap350

wnap320

wnap210v2

wndap360

nvd

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Certain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10, WAC120 before 2.1.4, WNDAP620 before 2.1.3, WND930 before 2.1.2, WN604 before 3.3.7, WNDAP660 before 3.7.4.0, WNDAP350 before 3.7.4.0, WNAP320 before 3.7.4.0, WNAP210v2 before 3.7.4.0, and WNDAP360 before 3.7.4.0.

Affected configurations

NVD

Node

netgearwac510_firmwareRange<1.3.0.10

AND

netgearwac510Match-

Node

netgearwac120_firmwareRange<2.1.4

AND

netgearwac120Match-

Node

netgearwndap620_firmwareRange<2.1.3

AND

netgearwndap620Match-

Node

netgearwnd930_firmwareRange<2.1.2

AND

netgearwnd930Match-

Node

netgearwn604_firmwareRange<3.3.7

AND

netgearwn604Match-

Node

netgearwndap660_firmwareRange<3.7.4.0

AND

netgearwndap660Match-

Node

netgearwndap350_firmwareRange<3.7.4.0

AND

netgearwndap350Match-

Node

netgearwnap320_firmwareRange<3.7.4.0

AND

netgearwnap320Match-

Node

netgearwnap210_firmwareRange<3.7.4.0

AND

netgearwnap210Matchv2

Node

netgearwndap360_firmwareRange<3.7.4.0

AND

netgearwndap360Match-

CPENameOperatorVersion
netgear:wac510_firmwarenetgear wac510 firmwarelt1.3.0.10

CPE	Name	Operator	Version
netgear:wac510_firmware	netgear wac510 firmware	lt	1.3.0.10

References

kb.netgear.com/000049060/Security-Advisory-for-Command-Injection-Vulnerability-on-Some-Wireless-Access-Points-PSV-2017-2213

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2017-18805

nvd1 prion1 cvelist1