Deviceways

Router

NETGEAR SRR60

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
Hardware revision not specified
Get OpenWrt firmware Release listed · 25.12.6
Hardware revision not specified
Open hardware record Release listed · 25.12.5
Original project github.com

Recorded configuration: 32/eMMC MB flash; 512 MB RAM

First installation
GUI OEM
Sources

Features & details

Check the project and hardware shown for each feature.

OpenWrt

OpenWrt — Source documentation (openwrt.org)

Installation routes recorded
GUI OEM
Availability recorded by source
Discontinued 2023

Hardware details

Technical references

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

CVSS 9.6 (v3.0)

NETGEAR SRR60

An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satellite (RBS50Y) V2.5.1.106, and Pro Tri-Band Business WiFi Router…

CVE-2020-11551

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satellite (RBS50Y) V2.5.1.106, and Pro Tri-Band Business WiFi Router (SRR60) AC3000 V2.5.1.106. The administrative SOAP interface allows an unauthenticated remote write of arbitrary Wi-Fi configuration data such as authentication details (e.g., the Web-admin password), network settings, DNS settings, system administration interface configuration, etc.

Security advisory MZ 20 02 Netgear Orbi Pro Security.txt — NETGEAR SRR60 (modzero.com) ↗
CVE published

CVSS 9.4 (v3.0)

NETGEAR SRR60

Certain NETGEAR devices are affected by disclosure of sensitive information

CVE-2019-20695

Affected firmware
SRR60: before 2.3.5.106
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects SRK60 before 2.3.5.106, SRR60 before 2.3.5.106, and SRS60 before 2.3.5.106.

CVE published

CVSS 8.8 (v3.1)

NETGEAR SRR60

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker

CVE-2020-26920

Affected firmware
SRR60: before 2.5.3.110
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.3.110, SRR60 before 2.5.3.110, and SRS60 before 2.5.3.110.

CVE published

CVSS 8.3 (v3.0)

NETGEAR SRR60

An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satellite (RBS50Y) V2.5.1.106, and Pro Tri-Band Business WiFi Router…

CVE-2020-11549

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satellite (RBS50Y) V2.5.1.106, and Pro Tri-Band Business WiFi Router (SRR60) AC3000 V2.5.1.106. The root account has the same password as the Web-admin component. Thus, by exploiting CVE-2020-11551, it is possible to achieve remote code execution with root privileges on the embedded Linux system.

Security advisory MZ 20 02 Netgear Orbi Pro Security.txt — NETGEAR SRR60 (modzero.com) ↗
CVE published

CVSS 8.2 (v3.1)

NETGEAR SRR60

Certain NETGEAR devices are affected by incorrect configuration of security settings

CVE-2021-45645

Affected firmware
SRR60: before 2.7.0.122
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects RBS50Y before 2.7.0.122, SRK60 before 2.7.0.122, SRR60 before 2.7.0.122, SRS60 before 2.7.0.122, SXK30 before 3.2.33.108, SXR30 before 3.2.33.108, SXS30 before 3.2.33.108, and SRC60 before 2.7.0.122.

Check more security advisories for this device · CVE.org