Lucene search

K
cve[email protected]CVE-2017-18805
HistoryApr 21, 2020 - 6:15 p.m.

CVE-2017-18805

2020-04-2118:15:12
CWE-74
web.nvd.nist.gov
21
cve-2017-18805
netgear
command injection
wac510
wac120
wndap620
wnd930
wn604
wndap660
wndap350
wnap320
wnap210v2
wndap360
nvd

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

12.6%

Certain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10, WAC120 before 2.1.4, WNDAP620 before 2.1.3, WND930 before 2.1.2, WN604 before 3.3.7, WNDAP660 before 3.7.4.0, WNDAP350 before 3.7.4.0, WNAP320 before 3.7.4.0, WNAP210v2 before 3.7.4.0, and WNDAP360 before 3.7.4.0.

Affected configurations

NVD
Node
netgearwac510_firmwareRange<1.3.0.10
AND
netgearwac510Match-
Node
netgearwac120_firmwareRange<2.1.4
AND
netgearwac120Match-
Node
netgearwndap620_firmwareRange<2.1.3
AND
netgearwndap620Match-
Node
netgearwnd930_firmwareRange<2.1.2
AND
netgearwnd930Match-
Node
netgearwn604_firmwareRange<3.3.7
AND
netgearwn604Match-
Node
netgearwndap660_firmwareRange<3.7.4.0
AND
netgearwndap660Match-
Node
netgearwndap350_firmwareRange<3.7.4.0
AND
netgearwndap350Match-
Node
netgearwnap320_firmwareRange<3.7.4.0
AND
netgearwnap320Match-
Node
netgearwnap210_firmwareRange<3.7.4.0
AND
netgearwnap210Matchv2
Node
netgearwndap360_firmwareRange<3.7.4.0
AND
netgearwndap360Match-

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

12.6%

Related for CVE-2017-18805