8.8

CVE-2018-21226

Certain NETGEAR devices are affected by authentication bypass. This affects JNR1010v2 before 1.1.0.48, JWNR2010v5 before 1.1.0.48, WNR1000v4 before 1.1.0.48, WNR2020 before 1.1.0.48, and WNR2050 before 1.1.0.48.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netgear ≫ Jnr1010 Firmware Version < 1.1.0.48
   Netgear ≫ Jnr1010 Version v2
Netgear ≫ Jwnr2010 Firmware Version < 1.1.0.48
   Netgear ≫ Jwnr2010 Version v5
Netgear ≫ Wnr1000 Firmware Version < 1.1.0.48
   Netgear ≫ Wnr1000 Version v4
Netgear ≫ Wnr2020 Firmware Version < 1.1.0.48
   Netgear ≫ Wnr2020 Version -
Netgear ≫ Wnr2050 Firmware Version < 1.1.0.48
   Netgear ≫ Wnr2050 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.7% 0.494
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 5.8 6.5 6.4
AV:A/AC:L/Au:N/C:P/I:P/A:P
MITRE 8.8 2.8 5.9
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

https://kb.netgear.com/000055110/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-PSV-2017-0748
Vendor Advisory