What is CVE-2018-21120?

CVE-2018-21120 is a high-severity vulnerability in Netgear Wac120, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.0/10. Published 2020-04-22.

How severe is CVE-2018-21120?

High severity. CVSS v3 base score is 8.0 out of 10.

Is CVE-2018-21120 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

CSRF in Netgear Wac120

CVE-2018-21120

Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660…

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.005 (37.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

Public proof-of-concept exploits

MercuryNearTheMoon/NetGear-WNAP320-CVEs

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2018-21120?: CVE-2018-21120 is a high-severity vulnerability in Netgear Wac120, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.0/10. Published 2020-04-22.
How severe is CVE-2018-21120?: High severity. CVSS v3 base score is 8.0 out of 10.
Is CVE-2018-21120 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.