Vulnerability in Netgear Wac120

CVE-2018-21094

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.1…

EPSS: 0.010 (59.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.

Affected products

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2018-21094?
CVE-2018-21094 is a high-severity vulnerability in Netgear Wac120. CVSS score: 7.3/10. Published 2020-04-27.
How severe is CVE-2018-21094?
High severity. CVSS v3 base score is 7.3 out of 10.
Is CVE-2018-21094 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.