CVE-2020-26920

published 2020-10-09

CVE-2020-26920: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.3.110, SRR60 before 2.5.3.110, and…

high 8.8 CVSS 3.1

AV A AC L PR N UI N S U C H I H A H

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.3.110, SRR60 before 2.5.3.110, and SRS60 before 2.5.3.110.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
netgear	srk60_firmware	< 2.5.3.110	2.5.3.110
netgear	srr60_firmware	< 2.5.3.110	2.5.3.110
netgear	srs60_firmware	< 2.5.3.110	2.5.3.110

CWE-77