CVE-2021-35973: Critical severity netgear wac104 vulnerability

Published Jun 30, 2021
·
Updated

NETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/minihttpd, allowing an unauthenticated attacker to invoke any action by adding the &currentsetting.htm substring to the HTTP query, a related issue to CVE-2020-27866. This directly allows the attacker to change the web UI password, and eventually to enable debug mode (telnetd) and gain a shell on the device as the admin limited-user account (however, escalation to root is simple because of weak permissions on the /etc/ directory).

Affected Software

2 affected components
Netgear Wac104 Firmware<1.0.4.15
Netgear WAC104

Event History

Jun 30, 2021
CVE Published
via MITRE·02:41 PM
Data Sourced
via MITRE·02:41 PM
DescriptionSeverity
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is CVE-2021-35973?

CVE-2021-35973 is an authentication bypass vulnerability in NETGEAR WAC104 devices before version 1.0.4.15.

2

What is the severity of CVE-2021-35973?

The severity of CVE-2021-35973 is critical, with a CVSS score of 9.8.

3

How does CVE-2021-35973 affect NETGEAR WAC104 devices?

CVE-2021-35973 allows an unauthenticated attacker to invoke any action by adding the 'currentsetting.htm' substring to the HTTP query.

4

Which version of NETGEAR WAC104 firmware is affected by CVE-2021-35973?

NETGEAR WAC104 devices before version 1.0.4.15 are affected by CVE-2021-35973.

5

How can I fix CVE-2021-35973?

To fix CVE-2021-35973, update your NETGEAR WAC104 device firmware to version 1.0.4.15 or above.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203