NETGEAR SRR60 Firmware vulnerabilities

11 CVEs affecting NETGEAR SRR60 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-45645, published 2021-12-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-11549, published 2020-05-18. High severity, CVSS 8.8. EPSS: 4.1% chance of exploitation in the next 30 days. An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satellite (RBS50Y) V2.5.1.106, and Pro Tri-Band Business WiFi Router (SRR60) AC3000…
CVE-2020-11551, published 2020-05-18. High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days. An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satellite (RBS50Y) V2.5.1.106, and Pro Tri-Band Business WiFi Router (SRR60) AC3000…
CVE-2020-11550, published 2020-05-18. Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days. An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satellite (RBS50Y) V2.5.1.106, and Pro Tri-Band Business WiFi Router (SRR60) AC3000…
CVE-2019-20695, published 2020-04-16. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by disclosure of sensitive information. This affects SRK60 before 2.3.5.106, SRR60 before 2.3.5.106, and SRS60 before 2.3.5.106.
CVE-2020-26920, published 2020-10-09. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.3.110, SRR60 before 2.5.3.110, and SRS60 before 2.5.3.110.
CVE-2020-14435, published 2020-06-18. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.2.104, SRS60 before 2.5.2.104, SRR60 before 2.5.2.104, SRK60B03 before…
CVE-2021-45645, published 2021-12-26. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects RBS50Y before 2.7.0.122, SRK60 before 2.7.0.122, SRR60 before 2.7.0.122, SRS60 before 2.7.0.122,…
CVE-2020-26913, published 2020-10-09. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.63, R7800 before 1.0.2.60, R8900 before 1.0.4.26, R9000 before…
CVE-2019-20747, published 2020-04-16. Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.58, D7800 before 1.0.1.40, R7500v2 before 1.0.3.34, R7800 before…
CVE-2019-20717, published 2020-04-16. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by denial of service. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D7800 before 1.0.1.44, EX2700 before 1.0.1.52, EX6200v2 before 1.0.1.74, EX8000…

Latest

CVE-2018-21095, published 2020-04-27. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by stored XSS. This affects SRR60 before 2.2.1.210 and SRS60 before 2.2.1.210.