CVE-2021-20169

2021-12-3021:31:18

tenable

www.cve.org

netgear rax43

insecure communications

web interface

cleartext transmission

cve-2021-20169

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

31.4%

JSON

Netgear RAX43 version 1.0.3.96 does not utilize secure communications to the web interface. By default, all communication to/from the device is sent via HTTP, which causes potentially sensitive information (such as usernames and passwords) to be transmitted in cleartext.

CNA Affected

[
  {
    "product": "Netgear RAX43",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.3.96"
      }
    ]
  }
]

References

www.tenable.com/security/research/tra-2021-55