Details of VAR-202004-1569

ID

VAR-202004-1569

CVE

CVE-2018-21133

TITLE

plural NETGEAR Out-of-bounds write vulnerabilities in devices

Trust: 0.8

sources: JVNDB: JVNDB-2018-016410

DESCRIPTION

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17. plural NETGEAR The device is vulnerable to out-of-bounds writes.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. NETGEAR WAC505, etc. are all a wireless access point (AP) of NETGEAR company. The vulnerability stems from the fact that when the network system or product performs operations on the memory, the data boundary is not correctly verified, resulting in incorrect read and write operations to other associated memory locations. Attackers can use this vulnerability to cause buffer overflow or heap overflow

Trust: 2.16

sources: NVD: CVE-2018-21133 // JVNDB: JVNDB-2018-016410 // CNVD: CNVD-2021-50924

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2021-50924

AFFECTED PRODUCTS

vendor:	netgear	model:	wac510	scope:	lt	version:	5.0.0.17	Trust: 1.6
vendor:	netgear	model:	wac505	scope:	lt	version:	5.0.0.17	Trust: 1.6
vendor:	netgear	model:	wac505	scope:	eq	version:	5.0.0.17	Trust: 0.8
vendor:	netgear	model:	wac510	scope:	eq	version:	5.0.0.17	Trust: 0.8
vendor:	netgear	model:	wac720	scope:	eq	version:	5.0.0.17	Trust: 0.8
vendor:	netgear	model:	wac730	scope:	eq	version:	5.0.0.17	Trust: 0.8
vendor:	netgear	model:	wac740	scope:	eq	version:	5.0.0.17	Trust: 0.8
vendor:	netgear	model:	wnd930	scope:	eq	version:	5.0.0.17	Trust: 0.8
vendor:	netgear	model:	wac720	scope:	lt	version:	5.0.0.17	Trust: 0.6
vendor:	netgear	model:	wac730	scope:	lt	version:	5.0.0.17	Trust: 0.6
vendor:	netgear	model:	wnd930	scope:	lt	version:	5.0.0.17	Trust: 0.6

sources: CNVD: CNVD-2021-50924 // JVNDB: JVNDB-2018-016410 // NVD: CVE-2018-21133

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2018-21133
value:	CRITICAL
Trust: 1.0
cve@mitre.org:	CVE-2018-21133
value:	HIGH
Trust: 1.0
NVD:	JVNDB-2018-016410
value:	CRITICAL
Trust: 0.8
CNVD:	CNVD-2021-50924
value:	HIGH
Trust: 0.6
CNNVD:	CNNVD-202004-2024
value:	CRITICAL
Trust: 0.6

nvd@nist.gov:	CVE-2018-21133
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
NVD:	JVNDB-2018-016410
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.8
CNVD:	CNVD-2021-50924
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

nvd@nist.gov:	CVE-2018-21133
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	5.9
version:	3.1
Trust: 1.0
cve@mitre.org:	CVE-2018-21133
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	ADJACENT
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	5.9
version:	3.0
Trust: 1.0
NVD:	JVNDB-2018-016410
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: CNVD: CNVD-2021-50924 // JVNDB: JVNDB-2018-016410 // CNNVD: CNNVD-202004-2024 // NVD: CVE-2018-21133 // NVD: CVE-2018-21133

PROBLEMTYPE DATA

problemtype:

CWE-787

Trust: 1.8

sources: JVNDB: JVNDB-2018-016410 // NVD: CVE-2018-21133

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202004-2024

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202004-2024

CONFIGURATIONS

sources: JVNDB: JVNDB-2018-016410

PATCH

title:	Security Advisory for Pre-Authentication Stack Overflow on Some Wireless Access Points, PSV-2018-0326	url:	https://kb.netgear.com/000060227/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Wireless-Access-Points-PSV-2018-0326	Trust: 0.8
title:	Patch for Buffer overflow vulnerabilities in multiple NETGEAR products (CNVD-2021-50924)	url:	https://www.cnvd.org.cn/patchInfo/show/279096	Trust: 0.6
title:	Multiple NETGEAR Product Buffer Error Vulnerability Fix	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=116780	Trust: 0.6

sources: CNVD: CNVD-2021-50924 // JVNDB: JVNDB-2018-016410 // CNNVD: CNNVD-202004-2024

EXTERNAL IDS

db:	NVD	id:	CVE-2018-21133	Trust: 3.0
db:	JVNDB	id:	JVNDB-2018-016410	Trust: 0.8
db:	CNVD	id:	CNVD-2021-50924	Trust: 0.6
db:	CNNVD	id:	CNNVD-202004-2024	Trust: 0.6

sources: CNVD: CNVD-2021-50924 // JVNDB: JVNDB-2018-016410 // CNNVD: CNNVD-202004-2024 // NVD: CVE-2018-21133

REFERENCES

url:	https://nvd.nist.gov/vuln/detail/cve-2018-21133	Trust: 2.0
url:	https://kb.netgear.com/000060227/security-advisory-for-pre-authentication-stack-overflow-on-some-wireless-access-points-psv-2018-0326	Trust: 1.6
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-21133	Trust: 0.8

sources: CNVD: CNVD-2021-50924 // JVNDB: JVNDB-2018-016410 // CNNVD: CNNVD-202004-2024 // NVD: CVE-2018-21133

SOURCES

db:	CNVD	id:	CNVD-2021-50924
db:	JVNDB	id:	JVNDB-2018-016410
db:	CNNVD	id:	CNNVD-202004-2024
db:	NVD	id:	CVE-2018-21133

LAST UPDATE DATE

2024-11-23T21:35:53.426000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2021-50924	date:	2021-07-15T00:00:00
db:	JVNDB	id:	JVNDB-2018-016410	date:	2020-06-03T00:00:00
db:	CNNVD	id:	CNNVD-202004-2024	date:	2021-08-17T00:00:00
db:	NVD	id:	CVE-2018-21133	date:	2024-11-21T04:02:58.807

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2021-50924	date:	2021-07-14T00:00:00
db:	JVNDB	id:	JVNDB-2018-016410	date:	2020-06-03T00:00:00
db:	CNNVD	id:	CNNVD-202004-2024	date:	2020-04-23T00:00:00
db:	NVD	id:	CVE-2018-21133	date:	2020-04-23T20:15:12.897