Threat Investigation
Request a demo

CVE-2020-26920

High

Description

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.3.110, SRR60 before 2.5.3.110, and SRS60 before 2.5.3.110.

SeverityHigh
CVSS8.8
Exploit probability—
ProductNetgear Srk60 Firmware
PublishedOct 9, 2020
First seenOct 9, 2020

How to fix

Update
  • netgear srk60_firmware2.5.3.110 or later
  • netgear srr60_firmware2.5.3.110 or later
  • netgear srs60_firmware2.5.3.110 or later

Affected products

ProductAffected versionsFixed in
netgear srk60_firmwarev < 2.5.3.1102.5.3.110
netgear srr60_firmwarev < 2.5.3.1102.5.3.110
netgear srs60_firmwarev < 2.5.3.1102.5.3.110

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.