NetSight
high8.8

CVE-2020-14435

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

Impact

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.2.104, SRS60 before 2.5.2.104, SRR60 before 2.5.2.104, SRK60B03 before 2.5.2.104, SRK60B04 before 2.5.2.104, SRK60B05 before 2.5.2.104, and SRK60B06 before 2.5.2.104.

Affected products

VendorProductAffected versions
NetgearSrk60 Firmware
before 2.5.2.104
NetgearSrs60 Firmware
before 2.5.2.104
NetgearSrr60 Firmware
before 2.5.2.104
NetgearSrk60b03 Firmware
before 2.5.2.104
NetgearSrk60b04 Firmware
before 2.5.2.104
NetgearSrk60b05 Firmware
before 2.5.2.104
NetgearSrk60b06 Firmware
before 2.5.2.104

Weakness classification

References