netgear wac505 firmware

Name: netgear wac505 firmware
Brand: netgear

productUS

cpe:2.3:o:netgear:wac505_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

by severity

4critical10high8medium0low

updated 2026-10-28

vulnerabilities (22)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-21132US	critical9.8OT elevated	1.72% (77th)	—	5.0.0.17	2020-04-23	< 5.0.0.17
CVE-2018-21130US	high8.8	1.62% (76th)	—	5.0.0.17	2020-04-22	< 5.0.0.17
CVE-2018-21126US	high8.8	1.49% (74th)	—	5.0.0.17	2020-04-22	< 5.0.0.17
CVE-2018-21127US	high8.8	1.39% (72nd)	—	5.0.0.17	2020-04-22	< 5.0.0.17
CVE-2018-21133US	critical9.8	1.36% (72nd)	—	5.0.0.17	2020-04-23	< 5.0.0.17
CVE-2018-21131US	critical9.1	1.31% (71st)	—	5.0.0.17	2020-04-23	< 5.0.0.17
CVE-2018-21097US	critical9.8	1.19% (68th)	—	5.0.5.4	2020-04-27	< 5.0.5.4
CVE-2019-20696US	high7.5	1.13% (66th)	—	5.6.8.3	2020-04-16	< 5.6.8.3
CVE-2018-21094US	high7.3	1.04% (64th)	—	5.0.5.4	2020-04-27	< 5.0.5.4
CVE-2019-20654US	high7.5	0.95% (61st)	—	8.0.6.4	2020-04-15	< 8.0.6.4
CVE-2018-21119US	medium6.8	0.85% (58th)	—	5.0.5.4	2020-04-22	< 5.0.5.4
CVE-2018-21128US	high8.8	0.76% (55th)	—	5.0.0.17	2020-04-22	< 5.0.0.17
CVE-2019-20745US	medium6.8	0.74% (54th)	—	5.0.10.2	2020-04-16	< 5.0.10.2
CVE-2019-20651US	medium6.7	0.65% (51st)	—	8.2.1.16	2020-04-15	< 8.2.1.16
CVE-2018-21129US	medium6.5	0.63% (50th)	—	5.0.0.17	2020-04-22	< 5.0.0.17
CVE-2018-21124US	high8.8	0.60% (49th)	—	5.0.0.17	2020-04-22	< 5.0.0.17
CVE-2019-20653US	medium6.5	0.50% (43rd)	—	8.0.6.4	2020-04-15	< 8.0.6.4
CVE-2019-20698US	medium6.5	0.50% (42nd)	—	8.0.5.5	2020-04-16	< 8.0.5.5
CVE-2019-20693US	medium5.4	0.46% (40th)	—	8.0.6.4	2020-04-16	< 8.0.6.4
CVE-2018-21120US	high8.0	0.46% (40th)	—	5.0.5.4	2020-04-22	< 5.0.5.4
CVE-2019-20652US	medium6.5	0.31% (24th)	—	8.2.1.16	2020-04-15	< 8.2.1.16
CVE-2018-21096US	high7.4	0.31% (23rd)	—	5.0.5.4	2020-04-27	< 5.0.5.4

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-1190DMA Device Enabled Too Early in Boot Phase1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-287Improper Authentication1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE22 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan