PT-2020-10670 · NetGear · Netgear Srr60

Published 2020-04-16 · Updated 2021-07-21 · CVE-2019-20695

Positive Technologies (AI Summary)

CVSS v3.1

9.4

Critical

Base vector

AC:L/AV:N/A:L/C:H/I:H/PR:N/S:U/UI:N

Name of the Vulnerable Software and Affected Versions NETGEAR SRK60 versions prior to 2.3.5.106 NETGEAR SRR60 versions prior to 2.3.5.106 NETGEAR SRS60 versions prior to 2.3.5.106

Description The issue involves the disclosure of sensitive information in certain NETGEAR devices.

Recommendations For NETGEAR SRK60 versions prior to 2.3.5.106, update to version 2.3.5.106 or later. For NETGEAR SRR60 versions prior to 2.3.5.106, update to version 2.3.5.106 or later. For NETGEAR SRS60 versions prior to 2.3.5.106, update to version 2.3.5.106 or later.

Fix

Related Identifiers

CVE-2019-20695

Affected Products

Netgear Srr60

References · 3

• https://kb.netgear.com/000061234/Security-Advisory-for-Sensitive-Information-Disclosure-on-Orbi-Pro-WiFi-System-PSV-2019-0158 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20695 · Security Note
• https://osv.dev/vulnerability/CVE-2019-20695 · Vendor Advisory