NETGEAR WAC104 Firmware vulnerabilities

5 CVEs affecting NETGEAR WAC104 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-44262, published 2022-03-17.

More from NETGEAR.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-44261, published 2022-03-17. Medium severity, CVSS 5.3. EPSS: 20.3% chance of exploitation in the next 30 days. A vulnerability is in the 'BRS_top.html' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication. When processed, it…
• CVE-2021-35973, published 2021-06-30. Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days. NETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/mini_httpd, allowing an unauthenticated attacker to invoke any action by adding the…
• CVE-2021-44262, published 2022-03-17. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability is in the 'MNU_top.htm' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication. When processed, it…
• CVE-2021-38532, published 2021-08-11. High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days. NETGEAR WAC104 devices before 1.0.4.15 are affected by incorrect configuration of security settings.
• CVE-2020-35788, published 2020-12-30. Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days. NETGEAR WAC104 devices before 1.0.4.13 are affected by a buffer overflow by an authenticated user.