CVE-2021-20174

The CVE-2021-20174 entry concerns Netgear Nighthawk R6700 (firmware 1.0.4.120). The root cause is that web-interface traffic is not secured, with all communications over HTTP by default. As described in multiple connected sources, this can expose sensitive information (e.g., usernames and passwor...

CVE-2021-20173

Netgear Nighthawk R6700 version 1.0.4.120 contains a command injection vulnerability in update functionality of the device. By triggering a system update check via the SOAP interface, the device is susceptible to command injection via preconfigured values...

CVE-2021-20173

Netgear Nighthawk R6700 router (firmware 1.0.4.120) is affected by a command-injection vulnerability in the update functionality exposed via the SOAP interface. A system update check can be triggered with preconfigured values to inject commands. Root cause: insecure handling in the update/SOAP pa...

CVE-2021-45077

CVE-2021-45077 affects Netgear Nighthawk R6700 (firmware 1.0.4.120). The device stores usernames and passwords for its services in plaintext in the primary configuration file; CNVD-2022-02652 notes an encryption vulnerability due to failure to encrypt account information, with plaintext credentia...

CVE-2021-45077

Netgear Nighthawk R6700 version 1.0.4.120 stores sensitive information in plaintext. All usernames and passwords for the device's associated services are stored in plaintext on the device. For example, the admin password is stored in plaintext in the primary configuration file on the device...

CVE-2021-23147

Netgear Nighthawk R6700 version 1.0.4.120 does not have sufficient protections for the UART console. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection and execute commands as the root user without authentication...

CVE-2021-45732

Netgear Nighthawk R6700, firmware 1.0.4.120, is affected by a vulnerability where a hardcoded credential can be exploited to extract the device configuration. By using public tools to obtain the backup configuration, an attacker can repackage and restore it to alter settings not intended to be ma...

CVE-2021-45732

Netgear Nighthawk R6700 version 1.0.4.120 makes use of a hardcoded credential. It does not appear that normal users are intended to be able to manipulate configuration backups due to the fact that they are encrypted/obfuscated. By extracting the configuration using readily available public tools,...

CVE-2021-23147

The CVE concerns Netgear Nighthawk R6700 router (v1.0.4.120). The root cause is insufficient protections for the UART console, enabling a physically proximate attacker with serial access to execute commands as root without authentication. Implications include full device compromise and potential ...

CVE-2021-20172

All known versions of the Netgear Genie Installer for macOS contain a local privilege escalation vulnerability. The installer of the macOS version of Netgear Genie handles certain files in an insecure way. A malicious actor who has local access to the endpoint on which the software is going to be...

CVE-2021-20172

CVE-2021-20172 affects the macOS Netgear Genie Installer. All known versions handle certain files insecurely, enabling a local attacker with access to overwrite files and achieve root privilege escalation. Documentation here confirms the vulnerability and impact but provides no specific patch/ver...

CVE-2021-20169

Netgear RAX43 (firmware 1.0.3.96) is vulnerable because its web interface communicates over HTTP by default, transmitting credentials and other sensitive data in cleartext. The issue is described as a lack of secure (HTTPS) communications for the device’s web interface. Other connected references...

CVE-2021-20169

Netgear RAX43 version 1.0.3.96 does not utilize secure communications to the web interface. By default, all communication to/from the device is sent via HTTP, which causes potentially sensitive information such as usernames and passwords to be transmitted in cleartext...

CVE-2021-20168

Netgear RAX43 version 1.0.3.96 does not have sufficient protections to the UART interface. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection, login with default credentials, and execute commands as the root user. These default...

CVE-2021-20168

CVE-2021-20168 affects Netgear RAX43 firmware 1.0.3.96, exposing UART interface protection weaknesses. A threat actor with physical access can connect via serial, log in with default credentials (admin:admin), and execute commands as root. CVSSv3.1 vector indicates Physical access, Low attack com...

CVE-2021-20167

Netgear RAX43 firmware version 1.0.3.96 is affected by a command injection vulnerability in the readycloud CGI app. The issue is exploitable via the name parameter in the readycloud_control.cgi CGI (and, per related nuclei templates, a related buffer overrun in the cgi-bin endpoint that can redir...

CVE-2021-20167

Netgear RAX43 version 1.0.3.96 contains a command injection vulnerability. The readycloud cgi application is vulnerable to command injection in the name parameter...

CVE-2021-20166

Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability. The URL parsing functionality in the cgi-bin endpoint of the router containers a buffer overrun issue that can redirection control flow of the applicaiton...

CVE-2021-20166

Netgear RAX43 firmware 1.0.3.96 is affected by a buffer overrun in the cgi-bin URL parsing endpoint (CVE-2021-20166). Nuclei templates also describe a related issue: command injection/authentication bypass in readycloud_control.cgi’s name parameter, and note that this vulnerability combines CVE-2...

CVE-2021-20171

Netgear RAX43 version 1.0.3.96 stores sensitive information in plaintext. All usernames and passwords for the device's associated services are stored in plaintext on the device. For example, the admin password is stored in plaintext in the primary configuration file on the device...