PT-2020-8777 · NetGear · Netgear Wnd930+5

Published 2020-04-23 · Updated 2021-08-10 · CVE-2018-21133

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NETGEAR WAC505 versions prior to 5.0.0.17 NETGEAR WAC510 versions prior to 5.0.0.17 NETGEAR WAC720 versions prior to 5.0.0.17 NETGEAR WAC730 versions prior to 5.0.0.17 NETGEAR WAC740 versions prior to 5.0.0.17 NETGEAR WND930 versions prior to 5.0.0.17

Description The issue is a stack-based buffer overflow that can be exploited by an unauthenticated attacker.

Recommendations For WAC505 versions prior to 5.0.0.17, update to version 5.0.0.17 or later. For WAC510 versions prior to 5.0.0.17, update to version 5.0.0.17 or later. For WAC720 versions prior to 5.0.0.17, update to version 5.0.0.17 or later. For WAC730 versions prior to 5.0.0.17, update to version 5.0.0.17 or later. For WAC740 versions prior to 5.0.0.17, update to version 5.0.0.17 or later. For WND930 versions prior to 5.0.0.17, update to version 5.0.0.17 or later.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2018-21133

Affected Products

Netgear Wac505

Netgear Wac510

Netgear Wac720

Netgear Wac730

Netgear Wac740

Netgear Wnd930

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-21133 · Security Note
• https://osv.dev/vulnerability/CVE-2018-21133 · Vendor Advisory
• https://kb.netgear.com/000060227/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Wireless-Access-Points-PSV-2018-0326 · Vendor Advisory
• https://t.me/cvenotify/3148 · Telegram Post
• https://t.me/cvenotify/18907 · Telegram Post