NetSight
critical9.8

CVE-2018-21097

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

Impact

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WAC120 before 2.1.7, WN604 before 3.3.10, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, and WND930 before 2.1.5.

Affected products

VendorProductAffected versions
NetgearWac505 Firmware
before 5.0.5.4
NetgearWac510 Firmware
before 5.0.5.4
NetgearWac120 Firmware
before 2.1.7
NetgearWn604 Firmware
before 3.3.10
NetgearWnap320 Firmware
before 3.7.11.4
NetgearWnap210 Firmware
before 3.7.11.4
NetgearWndap350 Firmware
before 3.7.11.4
NetgearWndap360 Firmware
before 3.7.11.4
NetgearWndap660 Firmware
before 3.7.11.4
NetgearWndap620 Firmware
before 2.1.7
NetgearWnd930 Firmware
before 2.1.5

Weakness classification

References