CVE-2018-21096
Severity Score
7.4
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10.
Determinados dispositivos de NETGEAR están afectados por una vulnerabilidad de tipo CSRF. Esto afecta a WAC120 versiones anteriores a 2.1.7, WAC505 versiones anteriores a 5.0.5.4, WAC510 versiones anteriores a 5.0.5.4, WNAP320 versiones anteriores a 3.7.11.4, WNAP210v2 versiones anteriores a 3.7.11. 4, WNDAP350 versiones anteriores a 3.7.11.4, WNDAP360 versiones anteriores a 3.7.11.4, WNDAP660 versiones anteriores a 3.7.11.4, WNDAP620 versiones anteriores a 2.1.7, WND930 versiones anteriores a 2.1.5, y WN604 versiones anteriores a 3.3.10.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-04-20 CVE Reserved
- 2020-04-27 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-352: Cross-Site Request Forgery (CSRF)
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Netgear Search vendor "Netgear" | Wac120 Firmware Search vendor "Netgear" for product "Wac120 Firmware" | < 2.1.7 Search vendor "Netgear" for product "Wac120 Firmware" and version " < 2.1.7" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wac120 Search vendor "Netgear" for product "Wac120" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wac505 Firmware Search vendor "Netgear" for product "Wac505 Firmware" | < 5.0.5.4 Search vendor "Netgear" for product "Wac505 Firmware" and version " < 5.0.5.4" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wac505 Search vendor "Netgear" for product "Wac505" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wac510 Firmware Search vendor "Netgear" for product "Wac510 Firmware" | < 5.0.5.4 Search vendor "Netgear" for product "Wac510 Firmware" and version " < 5.0.5.4" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wac510 Search vendor "Netgear" for product "Wac510" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wnap320 Firmware Search vendor "Netgear" for product "Wnap320 Firmware" | < 3.7.11.4 Search vendor "Netgear" for product "Wnap320 Firmware" and version " < 3.7.11.4" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wnap320 Search vendor "Netgear" for product "Wnap320" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wnap210 Firmware Search vendor "Netgear" for product "Wnap210 Firmware" | < 3.7.11.4 Search vendor "Netgear" for product "Wnap210 Firmware" and version " < 3.7.11.4" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wnap210 Search vendor "Netgear" for product "Wnap210" | v2 Search vendor "Netgear" for product "Wnap210" and version "v2" | - |
Safe
|
| Netgear Search vendor "Netgear" | Wndap350 Firmware Search vendor "Netgear" for product "Wndap350 Firmware" | < 3.7.11.4 Search vendor "Netgear" for product "Wndap350 Firmware" and version " < 3.7.11.4" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wndap350 Search vendor "Netgear" for product "Wndap350" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wndap360 Firmware Search vendor "Netgear" for product "Wndap360 Firmware" | < 3.7.11.4 Search vendor "Netgear" for product "Wndap360 Firmware" and version " < 3.7.11.4" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wndap360 Search vendor "Netgear" for product "Wndap360" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wndap660 Firmware Search vendor "Netgear" for product "Wndap660 Firmware" | < 3.7.11.4 Search vendor "Netgear" for product "Wndap660 Firmware" and version " < 3.7.11.4" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wndap660 Search vendor "Netgear" for product "Wndap660" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wndap620 Firmware Search vendor "Netgear" for product "Wndap620 Firmware" | < 2.1.7 Search vendor "Netgear" for product "Wndap620 Firmware" and version " < 2.1.7" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wndap620 Search vendor "Netgear" for product "Wndap620" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wnd930 Firmware Search vendor "Netgear" for product "Wnd930 Firmware" | < 2.1.5 Search vendor "Netgear" for product "Wnd930 Firmware" and version " < 2.1.5" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wnd930 Search vendor "Netgear" for product "Wnd930" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wn604 Firmware Search vendor "Netgear" for product "Wn604 Firmware" | < 3.3.10 Search vendor "Netgear" for product "Wn604 Firmware" and version " < 3.3.10" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wn604 Search vendor "Netgear" for product "Wn604" | - | - |
Safe
|