CVE-2017-18806
Summary
| CVE | CVE-2017-18806 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-04-21 16:15:00 UTC |
| Updated | 2020-04-23 20:22:00 UTC |
| Description | Certain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10, WAC120 before 2.1.4, WNDAP620 before 2.1.3, WND930 before 2.1.2, WN604 before 3.3.7, WNDAP660 before 3.7.4.0, WNDAP350 before 3.7.4.0, WNAP320 before 3.7.4.0, WNAP210v2 before 3.7.4.0, and WNDAP360 before 3.7.4.0. |
Risk And Classification
Problem Types: CWE-74
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Netgear | Wac120 | - | All | All | All |
| Hardware | Netgear | Wac120 | - | All | All | All |
| Operating System | Netgear | Wac120 Firmware | All | All | All | All |
| Operating System | Netgear | Wac120 Firmware | All | All | All | All |
| Hardware | Netgear | Wac510 | - | All | All | All |
| Hardware | Netgear | Wac510 | - | All | All | All |
| Operating System | Netgear | Wac510 Firmware | All | All | All | All |
| Operating System | Netgear | Wac510 Firmware | All | All | All | All |
| Hardware | Netgear | Wn604 | - | All | All | All |
| Hardware | Netgear | Wn604 | - | All | All | All |
| Operating System | Netgear | Wn604 Firmware | All | All | All | All |
| Operating System | Netgear | Wn604 Firmware | All | All | All | All |
| Hardware | Netgear | Wnap210 | v2 | All | All | All |
| Hardware | Netgear | Wnap210 | v2 | All | All | All |
| Operating System | Netgear | Wnap210 Firmware | All | All | All | All |
| Operating System | Netgear | Wnap210 Firmware | All | All | All | All |
| Hardware | Netgear | Wnap320 | - | All | All | All |
| Hardware | Netgear | Wnap320 | - | All | All | All |
| Operating System | Netgear | Wnap320 Firmware | All | All | All | All |
| Operating System | Netgear | Wnap320 Firmware | All | All | All | All |
| Hardware | Netgear | Wnd930 | - | All | All | All |
| Hardware | Netgear | Wnd930 | - | All | All | All |
| Operating System | Netgear | Wnd930 Firmware | All | All | All | All |
| Operating System | Netgear | Wnd930 Firmware | All | All | All | All |
| Hardware | Netgear | Wndap350 | - | All | All | All |
| Hardware | Netgear | Wndap350 | - | All | All | All |
| Operating System | Netgear | Wndap350 Firmware | All | All | All | All |
| Operating System | Netgear | Wndap350 Firmware | All | All | All | All |
| Hardware | Netgear | Wndap360 | - | All | All | All |
| Hardware | Netgear | Wndap360 | - | All | All | All |
| Operating System | Netgear | Wndap360 Firmware | All | All | All | All |
| Operating System | Netgear | Wndap360 Firmware | All | All | All | All |
| Hardware | Netgear | Wndap620 | - | All | All | All |
| Hardware | Netgear | Wndap620 | - | All | All | All |
| Operating System | Netgear | Wndap620 Firmware | All | All | All | All |
| Operating System | Netgear | Wndap620 Firmware | All | All | All | All |
| Hardware | Netgear | Wndap660 | - | All | All | All |
| Hardware | Netgear | Wndap660 | - | All | All | All |
| Operating System | Netgear | Wndap660 Firmware | All | All | All | All |
| Operating System | Netgear | Wndap660 Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Advisory for Command Injection Vulnerability on Some Wireless Access Points, PSV-2017-2214 | Answer | NETGEAR Support | CONFIRM | kb.netgear.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.