NETGEAR WAC505 Firmware vulnerabilities

22 CVEs affecting NETGEAR WAC505 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-21097, published 2020-04-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-21132, published 2020-04-23. Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by authentication bypass. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.
CVE-2018-21130, published 2020-04-22. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.
CVE-2018-21126, published 2020-04-22. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.
CVE-2018-21127, published 2020-04-22. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.
CVE-2018-21133, published 2020-04-23. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.
CVE-2018-21131, published 2020-04-23. Critical severity, CVSS 9.1. EPSS: 1.3% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by unauthenticated firmware downgrade. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.
CVE-2018-21097, published 2020-04-27. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WAC120 before 2.1.7, WN604 before…
CVE-2019-20696, published 2020-04-16. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WAC505 before V5.6.8.3 and WAC510 before V5.6.8.3.
CVE-2018-21094, published 2020-04-27. High severity, CVSS 7.3. EPSS: 1% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4,…
CVE-2019-20654, published 2020-04-15. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC505 before 8.0.6.4 and WAC510 before 8.0.6.4.

Latest

CVE-2018-21096, published 2020-04-27. High severity, CVSS 7.4. EPSS: 0.3% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before…
CVE-2018-21129, published 2020-04-22. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.
CVE-2018-21128, published 2020-04-22. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by authentication bypass. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.