CVE-2017-18863
Summary
| CVE | CVE-2017-18863 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-04-28 16:15:00 UTC |
| Updated | 2020-05-05 13:26:00 UTC |
| Description | Certain NETGEAR devices are affected by command execution via a PHP form. This affects WN604 3.3.3 and earlier, WNAP210v2 3.5.20.0 and earlier, WNAP320 3.5.20.0 and earlier, WNDAP350 3.5.20.0 and earlier, WNDAP360 3.5.20.0 and earlier, WNDAP620 2.0.11 and earlier, WNDAP660 3.5.20.0 and earlier, WND930 2.0.11 and earlier, and WAC120 2.0.7 and earlier. |
Risk And Classification
Problem Types: CWE-74
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Netgear | Wac120 | - | All | All | All |
| Hardware | Netgear | Wac120 | - | All | All | All |
| Operating System | Netgear | Wac120 Firmware | All | All | All | All |
| Operating System | Netgear | Wac120 Firmware | All | All | All | All |
| Hardware | Netgear | Wn604 | - | All | All | All |
| Hardware | Netgear | Wn604 | - | All | All | All |
| Operating System | Netgear | Wn604 Firmware | All | All | All | All |
| Operating System | Netgear | Wn604 Firmware | All | All | All | All |
| Hardware | Netgear | Wnap210 | v2 | All | All | All |
| Hardware | Netgear | Wnap210 | v2 | All | All | All |
| Operating System | Netgear | Wnap210 Firmware | All | All | All | All |
| Operating System | Netgear | Wnap210 Firmware | All | All | All | All |
| Hardware | Netgear | Wnap320 | - | All | All | All |
| Hardware | Netgear | Wnap320 | - | All | All | All |
| Operating System | Netgear | Wnap320 Firmware | All | All | All | All |
| Operating System | Netgear | Wnap320 Firmware | All | All | All | All |
| Hardware | Netgear | Wnd930 | - | All | All | All |
| Hardware | Netgear | Wnd930 | - | All | All | All |
| Operating System | Netgear | Wnd930 Firmware | All | All | All | All |
| Operating System | Netgear | Wnd930 Firmware | All | All | All | All |
| Hardware | Netgear | Wndap350 | - | All | All | All |
| Hardware | Netgear | Wndap350 | - | All | All | All |
| Operating System | Netgear | Wndap350 Firmware | All | All | All | All |
| Operating System | Netgear | Wndap350 Firmware | All | All | All | All |
| Hardware | Netgear | Wndap360 | - | All | All | All |
| Hardware | Netgear | Wndap360 | - | All | All | All |
| Operating System | Netgear | Wndap360 Firmware | All | All | All | All |
| Operating System | Netgear | Wndap360 Firmware | All | All | All | All |
| Hardware | Netgear | Wndap620 | - | All | All | All |
| Hardware | Netgear | Wndap620 | - | All | All | All |
| Operating System | Netgear | Wndap620 Firmware | All | All | All | All |
| Operating System | Netgear | Wndap620 Firmware | All | All | All | All |
| Hardware | Netgear | Wndap660 | - | All | All | All |
| Hardware | Netgear | Wndap660 | - | All | All | All |
| Operating System | Netgear | Wndap660 Firmware | All | All | All | All |
| Operating System | Netgear | Wndap660 Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Advisory for PHP Vulnerabilities on Wireless Access Points, PSV-2017-0517 and PSV-2016-0258 | Answer | NETGEAR Support | CONFIRM | kb.netgear.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.