CVE-2017-18863
Severity Score
7.1
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Certain NETGEAR devices are affected by command execution via a PHP form. This affects WN604 3.3.3 and earlier, WNAP210v2 3.5.20.0 and earlier, WNAP320 3.5.20.0 and earlier, WNDAP350 3.5.20.0 and earlier, WNDAP360 3.5.20.0 and earlier, WNDAP620 2.0.11 and earlier, WNDAP660 3.5.20.0 and earlier, WND930 2.0.11 and earlier, and WAC120 2.0.7 and earlier.
Determinados dispositivos de NETGEAR están afectados por una ejecución de comandos por medio de un formulario PHP. Esto afecta a WN604 versiones 3.3.3 y anteriores, WNAP210v2 versiones 3.5.20.0 y anteriores, WNAP320 versiones 3.5.20.0 y anteriores, WNDAP350 versiones 3.5.20.0 y anteriores, WNDAP360 versiones 3.5.20.0 y anteriores, WNDAP620 versiones 2.0.11 y anteriores, WNDAP660 versiones 3.5.20.0 y anteriores, WND930 versiones 2.0.11 y anteriores, y WAC120 versiones 2.0.7 y anteriores.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-04-27 CVE Reserved
- 2020-04-28 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Netgear Search vendor "Netgear" | Wn604 Firmware Search vendor "Netgear" for product "Wn604 Firmware" | < 3.3.3 Search vendor "Netgear" for product "Wn604 Firmware" and version " < 3.3.3" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wn604 Search vendor "Netgear" for product "Wn604" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wnap210 Firmware Search vendor "Netgear" for product "Wnap210 Firmware" | < 3.5.20.0 Search vendor "Netgear" for product "Wnap210 Firmware" and version " < 3.5.20.0" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wnap210 Search vendor "Netgear" for product "Wnap210" | v2 Search vendor "Netgear" for product "Wnap210" and version "v2" | - |
Safe
|
| Netgear Search vendor "Netgear" | Wnap320 Firmware Search vendor "Netgear" for product "Wnap320 Firmware" | < 3.5.20.0 Search vendor "Netgear" for product "Wnap320 Firmware" and version " < 3.5.20.0" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wnap320 Search vendor "Netgear" for product "Wnap320" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wndap350 Firmware Search vendor "Netgear" for product "Wndap350 Firmware" | < 3.5.20.0 Search vendor "Netgear" for product "Wndap350 Firmware" and version " < 3.5.20.0" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wndap350 Search vendor "Netgear" for product "Wndap350" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wndap360 Firmware Search vendor "Netgear" for product "Wndap360 Firmware" | < 3.5.20.0 Search vendor "Netgear" for product "Wndap360 Firmware" and version " < 3.5.20.0" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wndap360 Search vendor "Netgear" for product "Wndap360" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wndap620 Firmware Search vendor "Netgear" for product "Wndap620 Firmware" | < 2.0.11 Search vendor "Netgear" for product "Wndap620 Firmware" and version " < 2.0.11" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wndap620 Search vendor "Netgear" for product "Wndap620" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wndap660 Firmware Search vendor "Netgear" for product "Wndap660 Firmware" | < 3.5.20.0 Search vendor "Netgear" for product "Wndap660 Firmware" and version " < 3.5.20.0" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wndap660 Search vendor "Netgear" for product "Wndap660" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wnd930 Firmware Search vendor "Netgear" for product "Wnd930 Firmware" | < 2.0.11 Search vendor "Netgear" for product "Wnd930 Firmware" and version " < 2.0.11" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wnd930 Search vendor "Netgear" for product "Wnd930" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wac120 Firmware Search vendor "Netgear" for product "Wac120 Firmware" | < 2.0.7 Search vendor "Netgear" for product "Wac120 Firmware" and version " < 2.0.7" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wac120 Search vendor "Netgear" for product "Wac120" | - | - |
Safe
|