PT-2020-12684
CVE-2020-11550
·
تاريخ النشر
2020-05-18
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
7.4
عاليةالمقاييسAC:L/AV:A/A:N/C:H/I:N/PR:N/S:C/UI:N
Name of the Vulnerable Software and Affected Versions
NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 version 2.5.1.106
NETGEAR Outdoor Satellite (RBS50Y) AC3000 version 2.5.1.106
NETGEAR Pro Tri-Band Business WiFi Router (SRR60) AC3000 version 2.5.1.106
Description
An issue allows an unauthenticated remote leak of sensitive Wi-Fi information, such as SSIDs and Pre-Shared-Keys (PSK), through the administrative SOAP interface.
Recommendations
For NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 version 2.5.1.106, consider disabling the administrative SOAP interface until a patch is available.
For NETGEAR Outdoor Satellite (RBS50Y) AC3000 version 2.5.1.106, restrict access to the administrative SOAP interface to minimize the risk of exploitation.
For NETGEAR Pro Tri-Band Business WiFi Router (SRR60) AC3000 version 2.5.1.106, avoid using the administrative SOAP interface until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾