1. Home
  2. CVE Database
  3. CVE-2018-21097
CRITICAL · 9.8

CVE-2018-21097

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WAC120 before 2.1.7, WN604 before 3.3.1...

Vulnerability Description

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WAC120 before 2.1.7, WN604 before 3.3.10, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, and WND930 before 2.1.5.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
NetgearWac505 Firmware< 5.0.5.4
NetgearWac505-
NetgearWac510 Firmware< 5.0.5.4
NetgearWac510-
NetgearWac120 Firmware< 2.1.7
NetgearWac120-
NetgearWn604 Firmware< 3.3.10
NetgearWn604-
NetgearWnap320 Firmware< 3.7.11.4
NetgearWnap320-
NetgearWnap210 Firmware< 3.7.11.4
NetgearWnap210v2
NetgearWndap350 Firmware< 3.7.11.4
NetgearWndap350-
NetgearWndap360 Firmware< 3.7.11.4
NetgearWndap360-
NetgearWndap660 Firmware< 3.7.11.4
NetgearWndap660-
NetgearWndap620 Firmware< 2.1.7
NetgearWndap620-

Related Weaknesses (CWE)

CWE-787

References

FAQ

What is CVE-2018-21097?

CVE-2018-21097 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WAC120 before 2.1.7, WN604 before 3.3.1...

How severe is CVE-2018-21097?

CVE-2018-21097 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2018-21097?

Check the references section above for vendor advisories and patch information. Affected products include: Netgear Wac505 Firmware, Netgear Wac505, Netgear Wac510 Firmware, Netgear Wac510, Netgear Wac120 Firmware.