CVE-2020-11551

High

An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satellite (RBS50Y)…

mitre·CWE-287·Published 2020-05-18

CVSS

8.8

EPSS

0.02

KEV

Exploits

cve.orgen

468 chars

An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satellite (RBS50Y) V2.5.1.106, and Pro Tri-Band Business WiFi Router (SRR60) AC3000 V2.5.1.106. The administrative SOAP interface allows an unauthenticated remote write of arbitrary Wi-Fi configuration data such as authentication details (e.g., the Web-admin password), network settings, DNS settings, system administration interface configuration, etc.

NVDen

468 chars

NVDes

535 chars

Se ha detectado un problema en NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 versión V2.5.1.106, Outdoor Satellite (RBS50Y) versión V2.5.1.106, y Pro Tri-Band Business WiFi Router (SRR60) AC3000 versión V2.5.1.106. La interfaz administrativa SOAP, permite una escritura remota no autenticada de datos de configuración Wi-Fi arbitrarios, tales como detalles de autenticación (por ejemplo, la contraseña de Web-admin), ajustes de red, ajustes de DNS, configuración de la interfaz de administración del sistema, etc.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.8	6.5	6.4	AV:A/AC:L/Au:N/C:P/I:P/A:P
3.0	Primary	cve.org	9.6	—	—	CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N
3.0	Primary	cve.org	9.6	—	—	CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N
3.0	Secondary	NVD	9.6	2.8	6.0	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
3.1	Primary	NVD	8.8	2.8	5.9	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H