CVE-2018-21120

🗓️ 22 Apr 2020 15:12:18Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 40 Views

NETGEAR devices affected by CSRF. WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10

Reporter	Title	Published	Views	Family All 6
CNVD	Cross-site Request Forgery Vulnerability in Multiple NETGEAR Products (CNVD-2021-59162)	23 Apr 202000:00	–	cnvd
Cvelist	CVE-2018-21120	22 Apr 202015:12	–	cvelist
EUVD	EUVD-2018-13638	7 Oct 202500:30	–	euvd
NVD	CVE-2018-21120	22 Apr 202016:15	–	nvd
OSV	CVE-2018-21120	22 Apr 202016:15	–	osv
Prion	Cross site request forgery (csrf)	22 Apr 202016:15	–	prion

NVD

Node

netgear wac120_firmwareRange<2.1.7

AND

netgear wac120Match-

Node

netgear wac505_firmwareRange<5.0.5.4

AND

netgear wac505Match-

Node

netgear wac510_firmwareRange<5.0.5.4

AND

netgear wac510Match-

Node

netgear wnap320_firmwareRange<3.7.11.4

AND

netgear wnap320Match-

Node

netgear wnap210_firmwareRange<3.7.11.4

AND

netgear wnap210Matchv2

Node

netgear wndap350_firmwareRange<3.7.11.4

AND

netgear wndap350Match-

Node

netgear wndap360_firmwareRange<3.7.11.4

AND

netgear wndap360Match-

Node

netgear wndap660_firmwareRange<3.7.11.4

AND

netgear wndap660Match-

Node

netgear wndap620_firmwareRange<2.1.7

AND

netgear wndap620Match-

Node

netgear wnd930_firmwareRange<2.1.5

AND

netgear wnd930Match-

Node

netgear wn604_firmwareRange<3.3.10

AND

netgear wn604Match-

Source	Link
kb	www.kb.netgear.com/000060238/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Wireless-Access-Points-PSV-2018-0095

21 Nov 2024 04:02Current

7.8High risk

Vulners AI Score7.8

CVSS 26

CVSS 3.18

CVSS 35.2

EPSS0.0017

netgear csrf wac120 wac505 wac510 wnap320 wnap210v2 wndap350 wndap360 wndap660 wndap620 wnd930 wn604