1. Home
  2. CVE Database
  3. CVE-2018-21120
HIGH · 8.0

CVE-2018-21120

Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11...

Vulnerability Description

Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10.

CVSS Score

8.0

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
NetgearWac120 Firmware< 2.1.7
NetgearWac120-
NetgearWac505 Firmware< 5.0.5.4
NetgearWac505-
NetgearWac510 Firmware< 5.0.5.4
NetgearWac510-
NetgearWnap320 Firmware< 3.7.11.4
NetgearWnap320-
NetgearWnap210 Firmware< 3.7.11.4
NetgearWnap210v2
NetgearWndap350 Firmware< 3.7.11.4
NetgearWndap350-
NetgearWndap360 Firmware< 3.7.11.4
NetgearWndap360-
NetgearWndap660 Firmware< 3.7.11.4
NetgearWndap660-
NetgearWndap620 Firmware< 2.1.7
NetgearWndap620-
NetgearWnd930 Firmware< 2.1.5
NetgearWnd930-

Related Weaknesses (CWE)

CWE-352

References

FAQ

What is CVE-2018-21120?

CVE-2018-21120 is a vulnerability with a CVSS score of 8.0 (HIGH). Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11...

How severe is CVE-2018-21120?

CVE-2018-21120 has been rated HIGH with a CVSS base score of 8.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-21120?

Check the references section above for vendor advisories and patch information. Affected products include: Netgear Wac120 Firmware, Netgear Wac120, Netgear Wac505 Firmware, Netgear Wac505, Netgear Wac510 Firmware.