Lucene search

K
cve[email protected]CVE-2017-18806
HistoryApr 21, 2020 - 4:15 p.m.

CVE-2017-18806

2020-04-2116:15:51
CWE-74
web.nvd.nist.gov
19
cve
command injection
netgear
wac510
wac120
wndap620
wnd930
wn604
wndap660
wndap350
wnap320
wnap210v2
wndap360

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

12.6%

Certain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10, WAC120 before 2.1.4, WNDAP620 before 2.1.3, WND930 before 2.1.2, WN604 before 3.3.7, WNDAP660 before 3.7.4.0, WNDAP350 before 3.7.4.0, WNAP320 before 3.7.4.0, WNAP210v2 before 3.7.4.0, and WNDAP360 before 3.7.4.0.

Affected configurations

NVD
Node
netgearwac510Match-
AND
netgearwac510_firmwareRange<1.3.0.10
Node
netgearwac120Match-
AND
netgearwac120_firmwareRange<2.1.4
Node
netgearwndap620Match-
AND
netgearwndap620_firmwareRange<2.1.3
Node
netgearwnd930Match-
AND
netgearwnd930_firmwareRange<2.1.2
Node
netgearwn604_firmwareRange<3.3.7
AND
netgearwn604Match-
Node
netgearwndap660_firmwareRange<3.7.4.0
AND
netgearwndap660Match-
Node
netgearwndap350_firmwareRange<3.7.4.0
AND
netgearwndap350Match-
Node
netgearwnap320_firmwareRange<3.7.4.0
AND
netgearwnap320Match-
Node
netgearwnap210_firmwareRange<3.7.4.0
AND
netgearwnap210Matchv2
Node
netgearwndap360_firmwareRange<3.7.4.0
AND
netgearwndap360Match-

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

12.6%

Related for CVE-2017-18806