CVE-2020-11550

Опубликовано: 18 мая 2020

Источник: nvd

CVSS3: 7.4

CVSS3: 6.5

CVSS2: 3.3

EPSS Низкий

Описание

An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satellite (RBS50Y) V2.5.1.106, and Pro Tri-Band Business WiFi Router (SRR60) AC3000 V2.5.1.106. The administrative SOAP interface allows an unauthenticated remote leak of sensitive/arbitrary Wi-Fi information, such as SSIDs and Pre-Shared-Keys (PSK).

Ссылки

https://github.com/modzero/MZ-20-02-NETGEAR-Orbi-Security
Exploit
Third Party Advisory
https://www.modzero.com/advisories/MZ-20-02-Netgear-Orbi-Pro-Security.txt
Exploit
Third Party Advisory
https://www.modzero.com/modlog/archives/2020/05/18/how_netgear_meshed_up_wifi_for_business/index.html
Exploit
Patch
Third Party Advisory
https://github.com/modzero/MZ-20-02-NETGEAR-Orbi-Security
Exploit
Third Party Advisory
https://www.modzero.com/advisories/MZ-20-02-Netgear-Orbi-Pro-Security.txt
Exploit
Third Party Advisory
https://www.modzero.com/modlog/archives/2020/05/18/how_netgear_meshed_up_wifi_for_business/index.html
Exploit
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:netgear:rbs50y_firmware:2.5.1.106:*:*:*:*:*:*:*

cpe:2.3:h:netgear:rbs50y:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:netgear:srr60_firmware:2.5.1.106:*:*:*:*:*:*:*

cpe:2.3:h:netgear:srr60:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:netgear:srs60_firmware:2.5.1.106:*:*:*:*:*:*:*

cpe:2.3:h:netgear:srs60:-:*:*:*:*:*:*:*

EPSS

Процентиль: 38%

0.00168

Низкий

7.4 High

CVSS3

6.5 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-2v7r-x2hj-38c2

github

больше 3 лет назад

EPSS

Процентиль: 38%

0.00168

Низкий

7.4 High

CVSS3

6.5 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

NVD-CWE-noinfo