PT-2020-7985 · NetGear · Readynas Surveillance

Published 2020-04-28 · Updated 2020-05-05 · CVE-2016-11056

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: ReadyNAS Surveillance versions 1.1.1-3-armel and earlier ReadyNAS Surveillance versions 1.4.1-3-amd64 and earlier

Description: The issue concerns anonymous root access affecting certain NETGEAR devices.

Recommendations: For ReadyNAS Surveillance versions 1.1.1-3-armel and earlier, update to a version later than 1.1.1-3-armel to resolve the issue. For ReadyNAS Surveillance versions 1.4.1-3-amd64 and earlier, update to a version later than 1.4.1-3-amd64 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2016-11056

Affected Products

Readynas Surveillance

References · 4

• https://osv.dev/vulnerability/CVE-2016-11056 · Vendor Advisory
• https://kb.netgear.com/30275/ReadyNAS-Surveillance-Security-Vulnerability-Announcement · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-11056 · Security Note
• https://t.me/cibsecurity/11704 · Telegram Post