CVE-2018-21094

EUVD-2018-13612
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.3 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
mitreCNA
7.3 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AC:L/AV:N/A:L/C:L/I:L/PR:N/S:U/UI:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 56%
Affected Products (NVD)
VendorProductVersion
netgearwac120_firmware
𝑥
< 2.1.7
netgearwac505_firmware
𝑥
< 5.0.5.4
netgearwac510_firmware
𝑥
< 5.0.5.4
netgearwnap320_firmware
𝑥
< 3.7.11.4
netgearwnap210_firmware
𝑥
< 3.7.11.4
netgearwndap350_firmware
𝑥
< 3.7.11.4
netgearwndap360_firmware
𝑥
< 3.7.11.4
netgearwndap660_firmware
𝑥
< 3.7.11.4
netgearwndap620_firmware
𝑥
< 2.1.7
netgearwnd930_firmware
𝑥
< 2.1.5
netgearwn604_firmware
𝑥
< 3.3.10
𝑥
= Vulnerable software versions
References
https://kb.netgear.com/000060460/Security-Advisory-for-a-Security-Misconfiguration-on-Some-Wireless-Access-Points-PSV-2018-0350
https://kb.netgear.com/000060460/Security-Advisory-for-a-Security-Misconfiguration-on-Some-Wireless-Access-Points-PSV-2018-0350