NETGEAR SRK60 Firmware vulnerabilities

7 CVEs affecting NETGEAR SRK60 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-45645, published 2021-12-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-20695, published 2020-04-16. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by disclosure of sensitive information. This affects SRK60 before 2.3.5.106, SRR60 before 2.3.5.106, and SRS60 before 2.3.5.106.
CVE-2020-26920, published 2020-10-09. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.3.110, SRR60 before 2.5.3.110, and SRS60 before 2.5.3.110.
CVE-2020-14435, published 2020-06-18. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.2.104, SRS60 before 2.5.2.104, SRR60 before 2.5.2.104, SRK60B03 before…
CVE-2021-45645, published 2021-12-26. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects RBS50Y before 2.7.0.122, SRK60 before 2.7.0.122, SRR60 before 2.7.0.122, SRS60 before 2.7.0.122,…
CVE-2020-26913, published 2020-10-09. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.63, R7800 before 1.0.2.60, R8900 before 1.0.4.26, R9000 before…
CVE-2019-20747, published 2020-04-16. Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.58, D7800 before 1.0.1.40, R7500v2 before 1.0.3.34, R7800 before…
CVE-2019-20717, published 2020-04-16. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by denial of service. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D7800 before 1.0.1.44, EX2700 before 1.0.1.52, EX6200v2 before 1.0.1.74, EX8000…