Authentication flaw

2021-12-3022:15:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.5%

JSON

Netgear Nighthawk R6700 version 1.0.4.120 does not have sufficient protections for the UART console. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection and execute commands as the root user without authentication.

CPENameOperatorVersion
r6700_firmwareeq1.0.4.120

CPE	Name	Operator	Version
	r6700_firmware	eq	1.0.4.120

References

www.tenable.com/security/research/tra-2021-57