Command injection

2020-06-1817:15:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.5%

JSON

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.2.104, SRS60 before 2.5.2.104, SRR60 before 2.5.2.104, SRK60B03 before 2.5.2.104, SRK60B04 before 2.5.2.104, SRK60B05 before 2.5.2.104, and SRK60B06 before 2.5.2.104.

CPENameOperatorVersion
srk60_firmwarelt2.5.2.104
srk60b03_firmwarelt2.5.2.104
srk60b04_firmwarelt2.5.2.104
srk60b05_firmwarelt2.5.2.104
srk60b06_firmwarelt2.5.2.104
srr60_firmwarelt2.5.2.104
srs60_firmwarelt2.5.2.104

Name	Operator	Version
srk60_firmware	lt	2.5.2.104
srk60b03_firmware	lt	2.5.2.104
srk60b04_firmware	lt	2.5.2.104
srk60b05_firmware	lt	2.5.2.104
srk60b06_firmware	lt	2.5.2.104
srr60_firmware	lt	2.5.2.104
srs60_firmware	lt	2.5.2.104