35 matches found
CVE-2021-45645
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects RBS50Y before 2.7.0.122, SRK60 before 2.7.0.122, SRR60 before 2.7.0.122, SRS60 before 2.7.0.122, SXK30 before 3.2.33.108, SXR30 before 3.2.33.108, SXS30 before 3.2.33.108, and SRC60 before 2.7.0.122...
CVE-2021-45645
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects RBS50Y before 2.7.0.122, SRK60 before 2.7.0.122, SRR60 before 2.7.0.122, SRS60 before 2.7.0.122, SXK30 before 3.2.33.108, SXR30 before 3.2.33.108, SXS30 before 3.2.33.108, and SRC60 before 2.7.0.122...
CVE-2021-45645: Undefined Security Weakness
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects RBS50Y before 2.7.0.122, SRK60 before 2.7.0.122, SRR60 before 2.7.0.122, SRS60 before 2.7.0.122, SXK30 before 3.2.33.108, SXR30 before 3.2.33.108, SXS30 before 3.2.33.108, and SRC60 before 2.7.0.122...
PT-2021-5884
Name of the Vulnerable Software and Affected Versions RBS50Y versions prior to 2.7.0.122 SRK60 versions prior to 2.7.0.122 SRR60 versions prior to 2.7.0.122 SRS60 versions prior to 2.7.0.122 SXK30 versions prior to 3.2.33.108 SXR30 versions prior to 3.2.33.108 SXS30 versions prior to 3.2.33.108...
CVE-2020-26920
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.3.110, SRR60 before 2.5.3.110, and SRS60 before 2.5.3.110...
CVE-2020-26920
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.3.110, SRR60 before 2.5.3.110, and SRS60 before 2.5.3.110...
Stack overflow
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.63, R7800 before 1.0.2.60, R8900 before 1.0.4.26, R9000 before 1.0.4.26, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before 2.3.0.28, RBK50 before 2.3.0.32, RBR5...
CVE-2020-26920
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.3.110, SRR60 before 2.5.3.110, and SRS60 before 2.5.3.110...
CVE-2020-26920: Improper Neutralization of Special Elements used in a Command
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.3.110, SRR60 before 2.5.3.110, and SRS60 before 2.5.3.110...
PT-2020-5877
Name of the Vulnerable Software and Affected Versions: NETGEAR Orbi SRK60 versions prior to 2.5.3.110 NETGEAR Orbi SRR60 versions prior to 2.5.3.110 NETGEAR Orbi SRS60 versions prior to 2.5.3.110 Description: The issue is related to insufficient input sanitization in the Wi-Fi system's firmware,...
Command injection
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.2.104, SRS60 before 2.5.2.104, SRR60 before 2.5.2.104, SRK60B03 before 2.5.2.104, SRK60B04 before 2.5.2.104, SRK60B05 before 2.5.2.104, and SRK60B06 before 2.5.2.104...
CVE-2020-14435
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.2.104, SRS60 before 2.5.2.104, SRR60 before 2.5.2.104, SRK60B03 before 2.5.2.104, SRK60B04 before 2.5.2.104, SRK60B05 before 2.5.2.104, and SRK60B06 before 2.5.2.104...
PT-2020-5359
Name of the Vulnerable Software and Affected Versions NETGEAR SRK60 versions prior to 2.5.2.104 NETGEAR SRS60 versions prior to 2.5.2.104 NETGEAR SRR60 versions prior to 2.5.2.104 NETGEAR SRK60B03 versions prior to 2.5.2.104 NETGEAR SRK60B04 versions prior to 2.5.2.104 NETGEAR SRK60B05 versions...
CVE-2020-14435: Improper Neutralization of Special Elements used in a Command
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.2.104, SRS60 before 2.5.2.104, SRR60 before 2.5.2.104, SRK60B03 before 2.5.2.104, SRK60B04 before 2.5.2.104, SRK60B05 before 2.5.2.104, and SRK60B06 before 2.5.2.104...
CVE-2020-11550
The CVE-2020-11550 entry concerns NETGEAR Orbi devices: SRS60 AC3000 (SW 2.5.1.106), Outdoor Satellite RBS50Y (2.5.1.106), and SRR60 AC3000 (2.5.1.106). The issue is an unauthenticated disclosure via the administrative SOAP interface that can leak sensitive Wi‑Fi data, including SSIDs and PSKs. R...
CVE-2020-11551: Improper Authentication
An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite SRS60 AC3000 V2.5.1.106, Outdoor Satellite RBS50Y V2.5.1.106, and Pro Tri-Band Business WiFi Router SRR60 AC3000 V2.5.1.106. The administrative SOAP interface allows an unauthenticated remote write of arbitrary Wi-Fi...
CVE-2020-11549: Use of Hard-coded Credentials
An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite SRS60 AC3000 V2.5.1.106, Outdoor Satellite RBS50Y V2.5.1.106, and Pro Tri-Band Business WiFi Router SRR60 AC3000 V2.5.1.106. The root account has the same password as the Web-admin component. Thus, by exploiting...
PT-2020-12685
Name of the Vulnerable Software and Affected Versions NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite SRS60 version 2.5.1.106 NETGEAR Outdoor Satellite RBS50Y version 2.5.1.106 NETGEAR Pro Tri-Band Business WiFi Router SRR60 version 2.5.1.106 Description An issue allows an unauthenticated...
NETGEAR SRR60 and SRS60 Cross-Site Scripting Vulnerability
The NETGEAR SRR60 and NETGEAR SRS60 are both wireless routers from NETGEAR. A cross-site scripting vulnerability exists in the NETGEAR SRR60 prior to version 2.2.1.210 and the SRS60 prior to version 2.2.1.210, which stems from a lack of proper validation of client-side data by the WEB application...