CVE-2020-14435

Name of the Vulnerable Software and Affected Versions NETGEAR SRK60 versions prior to 2.5.2.104 NETGEAR SRS60 versions prior to 2.5.2.104 NETGEAR SRR60 versions prior to 2.5.2.104 NETGEAR SRK60B03 versions prior to 2.5.2.104 NETGEAR SRK60B04 versions prior to 2.5.2.104 NETGEAR SRK60B05 versions prior to 2.5.2.104 NETGEAR SRK60B06 versions prior to 2.5.2.104

Description The issue is caused by command injection that can be exploited by an unauthenticated attacker. This allows a remote attacker to execute arbitrary commands. The vulnerability exists due to the failure to neutralize special elements in the embedded software of NETGEAR routers.

Recommendations For NETGEAR SRK60 versions prior to 2.5.2.104, update to version 2.5.2.104 or later. For NETGEAR SRS60 versions prior to 2.5.2.104, update to version 2.5.2.104 or later. For NETGEAR SRR60 versions prior to 2.5.2.104, update to version 2.5.2.104 or later. For NETGEAR SRK60B03 versions prior to 2.5.2.104, update to version 2.5.2.104 or later. For NETGEAR SRK60B04 versions prior to 2.5.2.104, update to version 2.5.2.104 or later. For NETGEAR SRK60B05 versions prior to 2.5.2.104, update to version 2.5.2.104 or later. For NETGEAR SRK60B06 versions prior to 2.5.2.104, update to version 2.5.2.104 or later.