Approved changes feed: RSS · Atom

cpe:2.3:h:netgear:wn604:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorNetgear (99700297-c207-56f4-abd0-97ab0c8bf3ab)
ProductWn604 (c826e32e-5533-5327-a0a7-9ce1d8e4dd0e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6646 vulnerable 2026-06-08 06:58:20.080842 Netgear WN604 Web Interface downloadFile.php information disclosure
MEDIUM (5.3)
A vulnerability was found in Netgear WN604 up to 20240710. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /downloadFile.php of the component Web Interface. The manipulation of the argument file with the input config leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-271052. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-07-10T17:31:04.041Z
Updated: 2024-08-01T21:41:04.277Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-21120 not_vulnerable 2026-06-08 05:11:28.593936 Details available
MEDIUM (5.2)
Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10.
Published: 2020-04-22T15:12:18.000Z
Updated: 2024-08-05T12:19:27.644Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-21097 not_vulnerable 2026-06-08 05:11:28.532208 Details available
HIGH (7.1)
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WAC120 before 2.1.7, WN604 before 3.3.10, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, and WND930 before 2.1.5.
Published: 2020-04-27T15:57:34.000Z
Updated: 2024-08-05T12:19:27.583Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-21096 not_vulnerable 2026-06-08 05:11:28.531422 Details available
MEDIUM (5.2)
Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10.
Published: 2020-04-27T15:56:14.000Z
Updated: 2024-08-05T12:19:27.607Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-21094 not_vulnerable 2026-06-08 05:11:28.525696 Details available
HIGH (7.3)
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10.
Published: 2020-04-27T14:42:14.000Z
Updated: 2024-08-05T12:19:27.611Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-18863 not_vulnerable 2026-06-08 05:09:12.661667 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-18806 not_vulnerable 2026-06-08 05:09:11.837257 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-18805 not_vulnerable 2026-06-08 05:09:11.830505 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1556 not_vulnerable 2026-06-08 05:07:31.713160 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1555 not_vulnerable 2026-06-08 05:07:31.710047 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.