Approved changes feed: RSS · Atom

cpe:2.3:o:netgear:srs60_firmware:2.5.1.106:*:*:*:*:*:*:*

part: o version: 2.5.1.106 update: *

VendorNetgear (99700297-c207-56f4-abd0-97ab0c8bf3ab)
ProductSrs60 Firmware (c25bac36-7049-54e3-922a-9d28dd44c4b3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-11551 vulnerable 2026-06-08 05:16:47.408188 Details available
CRITICAL (9.6)
An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satellite (RBS50Y) V2.5.1.106, and Pro Tri-Band Business WiFi Router (SRR60) AC3000 V2.5.1.106. The administrative SOAP interface allows an unauthenticated remote write of arbitrary Wi-Fi configuration data such as authentication details (e.g., the Web-admin password), network settings, DNS settings, system administration interface configuration, etc.
Published: 2020-05-18T15:45:30.000Z
Updated: 2024-08-04T11:35:13.071Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11550 vulnerable 2026-06-08 05:16:47.407511 Details available
HIGH (7.4)
An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satellite (RBS50Y) V2.5.1.106, and Pro Tri-Band Business WiFi Router (SRR60) AC3000 V2.5.1.106. The administrative SOAP interface allows an unauthenticated remote leak of sensitive/arbitrary Wi-Fi information, such as SSIDs and Pre-Shared-Keys (PSK).
Published: 2020-05-18T15:46:26.000Z
Updated: 2024-08-04T11:35:13.286Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11549 vulnerable 2026-06-08 05:16:47.405790 Details available
HIGH (8.3)
An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satellite (RBS50Y) V2.5.1.106, and Pro Tri-Band Business WiFi Router (SRR60) AC3000 V2.5.1.106. The root account has the same password as the Web-admin component. Thus, by exploiting CVE-2020-11551, it is possible to achieve remote code execution with root privileges on the embedded Linux system.
Published: 2020-05-18T15:47:26.000Z
Updated: 2024-08-04T11:35:13.341Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.