CVE-2018-21097 - CVE House
Back to Database
Status published High CVE-2018-21097

Certain NETGEAR devices are affected by a stack-based buffer overflow...

Vulnerability Description

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WAC120 before 2.1.7, WN604 before 3.3.10, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, and WND930 before 2.1.5.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-21097

Credits & Attribution

No credits recorded in the NVD database.

References

More from netgear

View All →
CVE-2022-48322
NETGEAR Nighthawk WiFi Mesh systems and routers are affected by...
Unknown 0
CVE-2022-48196
Certain NETGEAR devices are affected by a buffer overflow by...
High 7.4
CVE-2022-48176
Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before...
Unknown 0
CVE-2022-47052
The web interface of the 'Nighthawk R6220 AC1200 Smart Wi-Fi...
Unknown 0
CVE-2022-46424
An exploitable firmware modification vulnerability was discovered on the Netgear...
Unknown 0

Affected Vendor

Affected Software

wac505 firmware, wac510 firmware, wac120 firmware, wn604 firmware, wnap320 firmware, wnap210 firmware, wndap350 firmware, wndap360 firmware, wndap660 firmware, wndap620 firmware, wnd930 firmware
Vulnerable Versions:
0

Timeline

Official Publish: April 27th, 2020
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AC:L/AV:N/A:N/C:L/I:H/PR:N/S:U/UI:R

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.