Wireless access point

NETGEAR WNDAP620

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
Hardware revision not specified
Get OpenWrt firmware Release listed · 25.12.6
Hardware revision not specified
Open hardware record

Recorded configuration: 32NAND MB flash; 128 MB RAM

First installation
U-Boot TFTP + serial recovery
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

Netgear WNDAP620 — WikiDevi (github.com)

Hardware revision
-100NAS

OpenWrt

OpenWrt — Source documentation (openwrt.org)

Installation routes recorded
U-Boot TFTP + serial recovery
Recovery routes recorded
U-Boot TFTP + serial recovery
Availability recorded by source
Available 2020

Hardware details

Technical references

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVSS 7.3 (v3.0)

NETGEAR WNDAP620

Certain NETGEAR devices are affected by incorrect configuration of security settings

CVE-2018-21094

Affected firmware
WNDAP620: before 2.1.7
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10.

CVSS 7.1 (v3.0)

NETGEAR WNDAP620

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker

CVE-2018-21097

Affected firmware
WNDAP620: before 2.1.7
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WAC120 before 2.1.7, WN604 before 3.3.10, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, and WND930 before 2.1.5.

CVSS 6.7 (v3.0)

NETGEAR WNDAP620

Certain NETGEAR devices are affected by command injection

CVE-2017-18805

Affected firmware
WNDAP620: before 2.1.3
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources

Certain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10, WAC120 before 2.1.4, WNDAP620 before 2.1.3, WND930 before 2.1.2, WN604 before 3.3.7, WNDAP660 before 3.7.4.0, WNDAP350 before 3.7.4.0, WNAP320 before 3.7.4.0, WNAP210v2 before 3.7.4.0, and WNDAP360 before 3.7.4.0.

CVSS 6.7 (v3.0)

NETGEAR WNDAP620

Certain NETGEAR devices are affected by command injection

CVE-2017-18806

Affected firmware
WNDAP620: before 2.1.3
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources

Certain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10, WAC120 before 2.1.4, WNDAP620 before 2.1.3, WND930 before 2.1.2, WN604 before 3.3.7, WNDAP660 before 3.7.4.0, WNDAP350 before 3.7.4.0, WNAP320 before 3.7.4.0, WNAP210v2 before 3.7.4.0, and WNDAP360 before 3.7.4.0.

CVSS 5.2 (v3.0)

NETGEAR WNDAP620

Certain NETGEAR devices are affected by CSRF

CVE-2018-21096

Affected firmware
WNDAP620: before 2.1.7
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources

Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10.

Check more security advisories for this device · CVE.org