GCVE - cpe:2.3:h:netgear:wac104:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:netgear:wac104:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Netgear (`99700297-c207-56f4-abd0-97ab0c8bf3ab`)
Product	Wac104 (`43bc4b3a-14a1-5c41-ad66-e0e0a94c4b85`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-44262`	not_vulnerable	2026-06-08 05:36:45.637212	Details available A vulnerability is in the 'MNU_top.htm' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information for the device. Published: 2022-03-17T12:21:44.000Z Updated: 2024-08-04T04:17:24.876Z Open on db.gcve.eu Reference links https://www.netgear.com/about/security/ https://github.com/zer0yu/CVE_Request/blob/master/netgear/Netgear_W104_unauthorized_access_vulnerability_second.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-44261`	not_vulnerable	2026-06-08 05:36:45.624232	Details available A vulnerability is in the 'BRS_top.html' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication. When processed, it exposes firmware version information for the device. Published: 2022-03-17T12:24:14.000Z Updated: 2024-08-04T04:17:24.935Z Open on db.gcve.eu Reference links https://www.netgear.com/about/security/ https://github.com/zer0yu/CVE_Request/blob/master/netgear/Netgear_W104_unauthorized_access_vulnerability_first.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-38532`	not_vulnerable	2026-06-08 05:33:47.766864	Details available MEDIUM (6.8) NETGEAR WAC104 devices before 1.0.4.15 are affected by incorrect configuration of security settings. Published: 2021-08-10T23:59:55.000Z Updated: 2024-08-04T01:44:23.468Z Open on db.gcve.eu Reference links https://kb.netgear.com/000063787/Security-Advisory-for-Security-Misconfiguration-on-WAC104-PSV-2021-0124	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-35973`	not_vulnerable	2026-06-08 05:32:49.485460	Details available CRITICAL (9.8) NETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/mini_httpd, allowing an unauthenticated attacker to invoke any action by adding the &currentsetting.htm substring to the HTTP query, a related issue to CVE-2020-27866. This directly allows the attacker to change the web UI password, and eventually to enable debug mode (telnetd) and gain a shell on the device as the admin limited-user account (however, escalation to root is simple because of weak permissions on the /etc/ directory). Published: 2021-06-30T14:41:04.000Z Updated: 2024-08-04T00:47:43.087Z Open on db.gcve.eu Reference links https://gynvael.coldwind.pl/?lang=en&id=736 https://kb.netgear.com/000063785/Security-Advisory-for-Authentication-Bypass-on-WAC104-PSV-2021-0075	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-35788`	not_vulnerable	2026-06-08 05:25:01.747994	Details available HIGH (7.6) NETGEAR WAC104 devices before 1.0.4.13 are affected by a buffer overflow by an authenticated user. Published: 2020-12-29T23:40:13.000Z Updated: 2024-08-04T17:09:15.200Z Open on db.gcve.eu Reference links https://kb.netgear.com/000062719/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-WAC104-PSV-2020-0319	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.