CVE-2018-21094

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected software

No affected versions have been published.

Timeline

Published
Apr 27, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-210954.3Certain NETGEAR devices are affected by stored XSS. This affects SRR60 before 2.2.1.210 and SRS60 before 2.2.1.210.CVE-2018-210967.4Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 beforeCVE-2018-210979.8Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.5.4, WACVE-2018-210986.8NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-210998.0NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-211008.0NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-211018.0NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-211028.8NETGEAR ReadyNAS devices before 6.9.3 are affected by CSRF.CVE-2018-211036.8NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-211046.8NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-211056.8NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-211066.8NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.
CVE-2018-21094: High severity, CVSS 7.3 | Vulnix