Deviceways

Wireless access point

NETGEAR WNDAP660

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
Hardware revision not specified
Get OpenWrt firmware Release listed · 25.12.6
Hardware revision not specified
Open hardware record
Original project github.com

Recorded configuration: 32NAND MB flash; 256 MB RAM

First installation
U-Boot TFTP + serial recovery
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

Netgear WNDAP660 — WikiDevi (github.com)

Hardware revision
-100NAS

OpenWrt

OpenWrt — Source documentation (openwrt.org)

Installation routes recorded
U-Boot TFTP + serial recovery
Recovery routes recorded
U-Boot TFTP + serial recovery
Availability recorded by source
Discontinued

Hardware details

Technical references

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

Listed in CISA KEV ↗CVSS 9.8 (v3.1)

NETGEAR WNDAP660

(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350,…

CVE-2016-1555

Affected firmware
WNDAP660: before 3.5.5.0
Fix
Fix details in the linked record
Read certcc CVE record
Details and sources
Public disclosure CVE updated

(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.

CVE-2016-1555 record (kb.netgear.com) ↗45909 — NETGEAR WNDAP660 (exploit-db.com) ↗
CVE published

CVSS 7.3 (v3.0)

NETGEAR WNDAP660

Certain NETGEAR devices are affected by incorrect configuration of security settings

CVE-2018-21094

Affected firmware
WNDAP660: before 3.7.11.4
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10.

CVE published

CVSS 7.1 (v3.0)

NETGEAR WNDAP660

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker

CVE-2018-21097

Affected firmware
WNDAP660: before 3.7.11.4
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WAC120 before 2.1.7, WN604 before 3.3.10, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, and WND930 before 2.1.5.

CVE published

CVSS 6.7 (v3.0)

NETGEAR WNDAP660

Certain NETGEAR devices are affected by command injection

CVE-2017-18805

Affected firmware
WNDAP660: before 3.7.4.0
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

Certain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10, WAC120 before 2.1.4, WNDAP620 before 2.1.3, WND930 before 2.1.2, WN604 before 3.3.7, WNDAP660 before 3.7.4.0, WNDAP350 before 3.7.4.0, WNAP320 before 3.7.4.0, WNAP210v2 before 3.7.4.0, and WNDAP360 before 3.7.4.0.

CVE published

CVSS 6.7 (v3.0)

NETGEAR WNDAP660

Certain NETGEAR devices are affected by command injection

CVE-2017-18806

Affected firmware
WNDAP660: before 3.7.4.0
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

Certain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10, WAC120 before 2.1.4, WNDAP620 before 2.1.3, WND930 before 2.1.2, WN604 before 3.3.7, WNDAP660 before 3.7.4.0, WNDAP350 before 3.7.4.0, WNAP320 before 3.7.4.0, WNAP210v2 before 3.7.4.0, and WNDAP360 before 3.7.4.0.

Check more security advisories for this device · CVE.org