CVE-2021-35973
Critical
Description
NETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/mini_httpd, allowing an unauthenticated attacker to invoke any action by adding the ¤tsetting.htm substring to the HTTP query, a related issue to CVE-2020-27866. This directly allows the attacker to change the web UI password, and eventually to enable debug mode (telnetd) and gain a shell on the device as the admin limited-user account (however, escalation to root is simple because of weak permissions on the /etc/ directory).
SeverityCritical
CVSS9.8
Exploit probability—
Product
Netgear Wac104 Firmware
PublishedJun 30, 2021
First seenJun 30, 2021
How to fix
Update
- netgear wac104_firmware1.0.4.15 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netgear wac104_firmware | v < 1.0.4.15 | 1.0.4.15 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.