CVE-2018-21097

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WAC120 before 2.1.7, WN604 before 3.3.10, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, and WND930 before 2.1.5.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Apr 27, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-210986.8NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-210998.0NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-211008.0NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-211018.0NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-211028.8NETGEAR ReadyNAS devices before 6.9.3 are affected by CSRF.CVE-2018-211036.8NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-211046.8NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-211056.8NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-211066.8NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-211076.8NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-211086.8NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-211096.8NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.
CVE-2018-21097: Critical severity, CVSS 9.8 | Vulnix