CVE-2020-11549 : An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite

An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satellite (RBS50Y) V2.5.1.106, and Pro Tri-Band Business WiFi Router (SRR60) AC3000 V2.5.1.106. The root account has the same password as the Web-admin component. Thus, by exploiting CVE-2020-11551, it is possible to achieve remote code execution with root privileges on the embedded Linux system.

Published 2020-05-18 16:15:11

Updated 2020-05-20 14:26:18

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2020-11549

Netgear » Srr60 Firmware » Version: 2.5.1.106
cpe:2.3:o:netgear:srr60_firmware:2.5.1.106:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Srr60 » Version: N/A
Netgear » Srs60 Firmware » Version: 2.5.1.106
cpe:2.3:o:netgear:srs60_firmware:2.5.1.106:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Srs60 » Version: N/A
Netgear » Rbs50y Firmware » Version: 2.5.1.106
cpe:2.3:o:netgear:rbs50y_firmware:2.5.1.106:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Rbs50y » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2020-11549

EPSS FAQ

2.11%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 89 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-11549

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
8.3	HIGH	AV:A/AC:L/Au:N/C:C/I:C/A:C	6.5	10.0	NIST
Access Vector: Adjacent Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
8.3	HIGH	CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H	1.6	6.0	MITRE
Attack Vector: Adjacent Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Changed Confidentiality: High Integrity: High Availability: High
8.8	HIGH	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	2.8	5.9	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2020-11549

CWE-798 Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2020-11549

https://www.modzero.com/advisories/MZ-20-02-Netgear-Orbi-Pro-Security.txt

Exploit;Third Party Advisory

CVEs referencing this url
https://www.modzero.com/modlog/archives/2020/05/18/how_netgear_meshed_up_wifi_for_business/index.html

How Netgear meshed(*) up WiFi for Business | mod%log
Exploit;Patch;Third Party Advisory

CVEs referencing this url
https://github.com/modzero/MZ-20-02-NETGEAR-Orbi-Security

GitHub - modzero/MZ-20-02-NETGEAR-Orbi-Security: NETGEAR Orbi Pro Mesh WiFi System - Proof of Concept Exploits and additional information in security advisory MZ-20-02
Exploit;Third Party Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2020-11549

Products affected by CVE-2020-11549

Exploit prediction scoring system (EPSS) score for CVE-2020-11549

CVSS scores for CVE-2020-11549

CWE ids for CVE-2020-11549

References for CVE-2020-11549