Home

CVE-2018-21119

Description

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WAC505 before 5.0.5.4 and WAC510 before 5.0.5.4.

Risk Information

Base Score
6.8
MODERATE
Vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.145

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2018-21097 ,CVE-2018-21119 are affected in wac505_firmware 5.0.0.17NCM
Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) Vulnerability (CVE-2018-21119)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234