CVE-2017-18806
Severity Score
6.7
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Certain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10, WAC120 before 2.1.4, WNDAP620 before 2.1.3, WND930 before 2.1.2, WN604 before 3.3.7, WNDAP660 before 3.7.4.0, WNDAP350 before 3.7.4.0, WNAP320 before 3.7.4.0, WNAP210v2 before 3.7.4.0, and WNDAP360 before 3.7.4.0.
Determinados dispositivos NETGEAR, están afectados por una inyección de comandos. Esto afecta a WAC510 versiones anteriores a la versión 1.3.0.10, WAC120 versiones anteriores a la versión 2.1.4, WNDAP620 versiones anteriores a la versión 2.1.3, WND930 versiones anteriores a la versión 2.1.2, WN604 versiones anteriores a la versión 3.3. 7, WNDAP660 versiones anteriores a la versión 3.7.4.0, WNDAP350 versiones anteriores a la versión 3.7.4.0, WNAP320 versiones anteriores a la versión 3.7.4.0, WNAP210v2 versiones anteriores a la versión 3.7.4.0, y WNDAP360 versiones anteriores a la versión 3.7.4.0.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-04-20 CVE Reserved
- 2020-04-21 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Netgear Search vendor "Netgear" | Wac510 Firmware Search vendor "Netgear" for product "Wac510 Firmware" | < 1.3.0.10 Search vendor "Netgear" for product "Wac510 Firmware" and version " < 1.3.0.10" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wac510 Search vendor "Netgear" for product "Wac510" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wac120 Firmware Search vendor "Netgear" for product "Wac120 Firmware" | < 2.1.4 Search vendor "Netgear" for product "Wac120 Firmware" and version " < 2.1.4" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wac120 Search vendor "Netgear" for product "Wac120" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wndap620 Firmware Search vendor "Netgear" for product "Wndap620 Firmware" | < 2.1.3 Search vendor "Netgear" for product "Wndap620 Firmware" and version " < 2.1.3" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wndap620 Search vendor "Netgear" for product "Wndap620" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wnd930 Firmware Search vendor "Netgear" for product "Wnd930 Firmware" | < 2.1.2 Search vendor "Netgear" for product "Wnd930 Firmware" and version " < 2.1.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wnd930 Search vendor "Netgear" for product "Wnd930" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wn604 Firmware Search vendor "Netgear" for product "Wn604 Firmware" | < 3.3.7 Search vendor "Netgear" for product "Wn604 Firmware" and version " < 3.3.7" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wn604 Search vendor "Netgear" for product "Wn604" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wndap660 Firmware Search vendor "Netgear" for product "Wndap660 Firmware" | < 3.7.4.0 Search vendor "Netgear" for product "Wndap660 Firmware" and version " < 3.7.4.0" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wndap660 Search vendor "Netgear" for product "Wndap660" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wndap350 Firmware Search vendor "Netgear" for product "Wndap350 Firmware" | < 3.7.4.0 Search vendor "Netgear" for product "Wndap350 Firmware" and version " < 3.7.4.0" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wndap350 Search vendor "Netgear" for product "Wndap350" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wnap320 Firmware Search vendor "Netgear" for product "Wnap320 Firmware" | < 3.7.4.0 Search vendor "Netgear" for product "Wnap320 Firmware" and version " < 3.7.4.0" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wnap320 Search vendor "Netgear" for product "Wnap320" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wnap210 Firmware Search vendor "Netgear" for product "Wnap210 Firmware" | < 3.7.4.0 Search vendor "Netgear" for product "Wnap210 Firmware" and version " < 3.7.4.0" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wnap210 Search vendor "Netgear" for product "Wnap210" | v2 Search vendor "Netgear" for product "Wnap210" and version "v2" | - |
Safe
|
| Netgear Search vendor "Netgear" | Wndap360 Firmware Search vendor "Netgear" for product "Wndap360 Firmware" | < 3.7.4.0 Search vendor "Netgear" for product "Wndap360 Firmware" and version " < 3.7.4.0" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wndap360 Search vendor "Netgear" for product "Wndap360" | - | - |
Safe
|