Thorsten Schroeder

**Name of the Vulnerable Software and Affected Versions** NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 version 2.5.1.106 NETGEAR Outdoor Satellite (RBS50Y) AC3000 version 2.5.1.106 NETGEAR Pro Tri-Band Business WiFi Router (SRR60) AC3000 version 2.5.1.106 **Description** An issue allows an unauthenticated remote leak of sensitive Wi-Fi information, such as SSIDs and Pre-Shared-Keys (PSK), through the administrative SOAP interface. **Recommendations** For NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 version 2.5.1.106, consider disabling the administrative SOAP interface until a patch is available. For NETGEAR Outdoor Satellite (RBS50Y) AC3000 version 2.5.1.106, restrict access to the administrative SOAP interface to minimize the risk of exploitation. For NETGEAR Pro Tri-Band Business WiFi Router (SRR60) AC3000 version 2.5.1.106, avoid using the administrative SOAP interface until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) version 2.5.1.106 NETGEAR Outdoor Satellite (RBS50Y) version 2.5.1.106 NETGEAR Pro Tri-Band Business WiFi Router (SRR60) AC3000 version 2.5.1.106 **Description** The issue is related to the use of default credentials in the NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite, Pro Tri-Band Business WiFi Router, and Outdoor Satellite devices. This allows an attacker to achieve remote code execution with root privileges on the embedded Linux system by exploiting the default password of the root account, which is the same as the Web-admin component. **Recommendations** For NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) version 2.5.1.106, consider changing the default password of the root account and the Web-admin component to prevent exploitation. For NETGEAR Outdoor Satellite (RBS50Y) version 2.5.1.106, consider changing the default password of the root account and the Web-admin component to prevent exploitation. For NETGEAR Pro Tri-Band Business WiFi Router (SRR60) AC3000 version 2.5.1.106, consider changing the default password of the root account and the Web-admin component to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Conexant Systems mictray64 version 1.0.0.46 **Description** The issue concerns the Conexant Systems mictray64 task, which is used on various HP systems, including Elite, EliteBook, ProBook, and ZBook. It leaks sensitive data, specifically keystrokes, to any process. This leakage occurs through two unintended channels: debug messages that can be accessed by any process running in the current user session, and filesystem access to the C:UsersPublicMicTray.log file, which can be accessed by any process. **Recommendations** For Conexant Systems mictray64 version 1.0.0.46, consider restricting access to the MicTray.log file to minimize the risk of sensitive data leakage. Additionally, as a temporary workaround, disabling the LowLevelKeyboardProc Windows hook in mictray64.exe could help prevent keystroke capture until a more permanent solution is available.