CVE-2018-21097
Summary
| CVE | CVE-2018-21097 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-04-27 16:15:00 UTC |
| Updated | 2020-05-04 14:15:00 UTC |
| Description | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WAC120 before 2.1.7, WN604 before 3.3.10, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, and WND930 before 2.1.5. |
Risk And Classification
Problem Types: CWE-787
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Netgear | Wac120 | - | All | All | All |
| Hardware | Netgear | Wac120 | - | All | All | All |
| Operating System | Netgear | Wac120 Firmware | All | All | All | All |
| Operating System | Netgear | Wac120 Firmware | All | All | All | All |
| Hardware | Netgear | Wac505 | - | All | All | All |
| Hardware | Netgear | Wac505 | - | All | All | All |
| Operating System | Netgear | Wac505 Firmware | All | All | All | All |
| Operating System | Netgear | Wac505 Firmware | All | All | All | All |
| Hardware | Netgear | Wac510 | - | All | All | All |
| Hardware | Netgear | Wac510 | - | All | All | All |
| Operating System | Netgear | Wac510 Firmware | All | All | All | All |
| Operating System | Netgear | Wac510 Firmware | All | All | All | All |
| Hardware | Netgear | Wn604 | - | All | All | All |
| Hardware | Netgear | Wn604 | - | All | All | All |
| Operating System | Netgear | Wn604 Firmware | All | All | All | All |
| Operating System | Netgear | Wn604 Firmware | All | All | All | All |
| Hardware | Netgear | Wnap210 | v2 | All | All | All |
| Hardware | Netgear | Wnap210 | v2 | All | All | All |
| Operating System | Netgear | Wnap210 Firmware | All | All | All | All |
| Operating System | Netgear | Wnap210 Firmware | All | All | All | All |
| Hardware | Netgear | Wnap320 | - | All | All | All |
| Hardware | Netgear | Wnap320 | - | All | All | All |
| Operating System | Netgear | Wnap320 Firmware | All | All | All | All |
| Operating System | Netgear | Wnap320 Firmware | All | All | All | All |
| Hardware | Netgear | Wnd930 | - | All | All | All |
| Hardware | Netgear | Wnd930 | - | All | All | All |
| Operating System | Netgear | Wnd930 Firmware | All | All | All | All |
| Operating System | Netgear | Wnd930 Firmware | All | All | All | All |
| Hardware | Netgear | Wndap350 | - | All | All | All |
| Hardware | Netgear | Wndap350 | - | All | All | All |
| Operating System | Netgear | Wndap350 Firmware | All | All | All | All |
| Operating System | Netgear | Wndap350 Firmware | All | All | All | All |
| Hardware | Netgear | Wndap360 | - | All | All | All |
| Hardware | Netgear | Wndap360 | - | All | All | All |
| Operating System | Netgear | Wndap360 Firmware | All | All | All | All |
| Operating System | Netgear | Wndap360 Firmware | All | All | All | All |
| Hardware | Netgear | Wndap620 | - | All | All | All |
| Hardware | Netgear | Wndap620 | - | All | All | All |
| Operating System | Netgear | Wndap620 Firmware | All | All | All | All |
| Operating System | Netgear | Wndap620 Firmware | All | All | All | All |
| Hardware | Netgear | Wndap660 | - | All | All | All |
| Hardware | Netgear | Wndap660 | - | All | All | All |
| Operating System | Netgear | Wndap660 Firmware | All | All | All | All |
| Operating System | Netgear | Wndap660 Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Advisory for Pre-Authentication Stack Overflow on Some Wireless Access Points, PSV-2018-0094 | Answer | NETGEAR Support | CONFIRM | kb.netgear.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.