CVE-2017-18863

· HIGHModified

← All CVEs

CVSS v3.1

7.1

EPSS

0.50%

Published

Apr 28, 2020

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Certain NETGEAR devices are affected by command execution via a PHP form. This affects WN604 3.3.3 and earlier, WNAP210v2 3.5.20.0 and earlier, WNAP320 3.5.20.0 and earlier, WNDAP350 3.5.20.0 and earlier, WNDAP360 3.5.20.0 and earlier, WNDAP620 2.0.11 and earlier, WNDAP660 3.5.20.0 and earlier, WND930 2.0.11 and earlier, and WAC120 2.0.7 and earlier.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weaknesses (CWE)

CWE-74

Affected Products (18)

netgear · wn604_firmware (up to 3.3.3)vulnerable

netgear · wn604

netgear · wnap210_firmware (up to 3.5.20.0)vulnerable

netgear · wnap210

netgear · wnap320_firmware (up to 3.5.20.0)vulnerable

netgear · wnap320

netgear · wndap350_firmware (up to 3.5.20.0)vulnerable

netgear · wndap350

netgear · wndap360_firmware (up to 3.5.20.0)vulnerable

netgear · wndap360

netgear · wndap620_firmware (up to 2.0.11)vulnerable

netgear · wndap620

netgear · wndap660_firmware (up to 3.5.20.0)vulnerable

netgear · wndap660

netgear · wnd930_firmware (up to 2.0.11)vulnerable

netgear · wnd930

netgear · wac120_firmware (up to 2.0.7)vulnerable

netgear · wac120

References (2)

https://kb.netgear.com/000037827/Security-Advisory-for-PHP-Vulnerabilities-on-Wireless-Access-Points-PSV-2017-0517-and-PSV-2016-0258

Vendor Advisory

https://kb.netgear.com/000037827/Security-Advisory-for-PHP-Vulnerabilities-on-Wireless-Access-Points-PSV-2017-0517-and-PSV-2016-0258

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs