← Back

CVE-2018-21226

nvd nist
Published: Apr 28, 2020Modified: Nov 21, 2024

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

Certain NETGEAR devices are affected by authentication bypass. This affects JNR1010v2 before 1.1.0.48, JWNR2010v5 before 1.1.0.48, WNR1000v4 before 1.1.0.48, WNR2020 before 1.1.0.48, and WNR2050 before 1.1.0.48.

Affected (5)

Netgear
5 products
Jnr1010 Firmware
Jwnr2010 Firmware
Wnr1000 Firmware
Wnr2020 Firmware
Wnr2050 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Jnr1010 Firmware
Before 1.1.0.48
Running on/withPlatform Versions
Netgear
Jnr1010
Version v2
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Jwnr2010 Firmware
Before 1.1.0.48
Running on/withPlatform Versions
Netgear
Jwnr2010
Version v5
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wnr1000 Firmware
Before 1.1.0.48
Running on/withPlatform Versions
Netgear
Wnr1000
Version v4
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wnr2020 Firmware
Before 1.1.0.48
Running on/withPlatform Versions
Netgear
Wnr2020
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wnr2050 Firmware
Before 1.1.0.48
Running on/withPlatform Versions
Netgear
Wnr2050
All versions

Related CWEs

CWE-269
Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (2)

Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.