CVE-2021-35973: netgear wac104_firmware Incorrect Comparison
Vulnerability summary
CVE-2021-35973 is a high (CVSS 10.0) Incorrect Comparison vulnerability in netgear wac104_firmware. EPSS estimates a 3.06% chance of exploitation in the next 30 days, higher than 87.4% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 30-06-2021PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
NETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/mini_httpd, allowing an unauthenticated attacker to invoke any action by adding the ¤tsetting.htm substring to the HTTP query, a related issue to CVE-2020-27866. This directly allows the attacker to change the web UI password, and eventually to enable debug mode (telnetd) and gain a shell on the device as the admin limited-user account (however, escalation to root is simple because of weak permissions on the /etc/ directory).
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
3.06%
Chance of exploitation in the next 30 days
Percentile
87%
Versus all other CVEs
30-day change
0.00 pp
From 3.06% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (gynvael.coldwind.pl)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Netgear1 product
- wac104_firmware< 1.0.4.15
1 vendor · 1 product
References
2 links- kb.netgear.com/000063785/Security-Advisory-for-Authentication-Bypass-on-WAC104-PSV-2021-0075X Refsource MISCVendor Advisory