1. Home
  2. CVE Database
  3. CVE-2017-18863
HIGH · 7.1

CVE-2017-18863

Certain NETGEAR devices are affected by command execution via a PHP form. This affects WN604 3.3.3 and earlier, WNAP210v2 3.5.20.0 and earlier, WNAP320 3.5.20.0 and earlier, WNDAP350 3.5.20.0 and earl...

Vulnerability Description

Certain NETGEAR devices are affected by command execution via a PHP form. This affects WN604 3.3.3 and earlier, WNAP210v2 3.5.20.0 and earlier, WNAP320 3.5.20.0 and earlier, WNDAP350 3.5.20.0 and earlier, WNDAP360 3.5.20.0 and earlier, WNDAP620 2.0.11 and earlier, WNDAP660 3.5.20.0 and earlier, WND930 2.0.11 and earlier, and WAC120 2.0.7 and earlier.

CVSS Score

7.1

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
NetgearWn604 Firmware< 3.3.3
NetgearWn604-
NetgearWnap210 Firmware< 3.5.20.0
NetgearWnap210v2
NetgearWnap320 Firmware< 3.5.20.0
NetgearWnap320-
NetgearWndap350 Firmware< 3.5.20.0
NetgearWndap350-
NetgearWndap360 Firmware< 3.5.20.0
NetgearWndap360-
NetgearWndap620 Firmware< 2.0.11
NetgearWndap620-
NetgearWndap660 Firmware< 3.5.20.0
NetgearWndap660-
NetgearWnd930 Firmware< 2.0.11
NetgearWnd930-
NetgearWac120 Firmware< 2.0.7
NetgearWac120-

Related Weaknesses (CWE)

CWE-74

References

FAQ

What is CVE-2017-18863?

CVE-2017-18863 is a vulnerability with a CVSS score of 7.1 (HIGH). Certain NETGEAR devices are affected by command execution via a PHP form. This affects WN604 3.3.3 and earlier, WNAP210v2 3.5.20.0 and earlier, WNAP320 3.5.20.0 and earlier, WNDAP350 3.5.20.0 and earl...

How severe is CVE-2017-18863?

CVE-2017-18863 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-18863?

Check the references section above for vendor advisories and patch information. Affected products include: Netgear Wn604 Firmware, Netgear Wn604, Netgear Wnap210 Firmware, Netgear Wnap210, Netgear Wnap320 Firmware.