CVE-2021-23147

The CVE concerns Netgear Nighthawk R6700 router (v1.0.4.120). The root cause is insufficient protections for the UART console, enabling a physically proximate attacker with serial access to execute commands as root without authentication. Implications include full device compromise and potential ...

CVE-2021-45732

Netgear Nighthawk R6700 version 1.0.4.120 makes use of a hardcoded credential. It does not appear that normal users are intended to be able to manipulate configuration backups due to the fact that they are encrypted/obfuscated. By extracting the configuration using readily available public tools,...

CVE-2021-20172

All known versions of the Netgear Genie Installer for macOS contain a local privilege escalation vulnerability. The installer of the macOS version of Netgear Genie handles certain files in an insecure way. A malicious actor who has local access to the endpoint on which the software is going to be...

CVE-2021-20172

CVE-2021-20172 affects the macOS Netgear Genie Installer. All known versions handle certain files insecurely, enabling a local attacker with access to overwrite files and achieve root privilege escalation. Documentation here confirms the vulnerability and impact but provides no specific patch/ver...

CVE-2021-20169

Netgear RAX43 (firmware 1.0.3.96) is vulnerable because its web interface communicates over HTTP by default, transmitting credentials and other sensitive data in cleartext. The issue is described as a lack of secure (HTTPS) communications for the device’s web interface. Other connected references...

CVE-2021-20169

Netgear RAX43 version 1.0.3.96 does not utilize secure communications to the web interface. By default, all communication to/from the device is sent via HTTP, which causes potentially sensitive information such as usernames and passwords to be transmitted in cleartext...

CVE-2021-20168

Netgear RAX43 version 1.0.3.96 does not have sufficient protections to the UART interface. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection, login with default credentials, and execute commands as the root user. These default...

CVE-2021-20167

Netgear RAX43 firmware version 1.0.3.96 is affected by a command injection vulnerability in the readycloud CGI app. The issue is exploitable via the name parameter in the readycloud_control.cgi CGI (and, per related nuclei templates, a related buffer overrun in the cgi-bin endpoint that can redir...

CVE-2021-20168

CVE-2021-20168 affects Netgear RAX43 firmware 1.0.3.96, exposing UART interface protection weaknesses. A threat actor with physical access can connect via serial, log in with default credentials (admin:admin), and execute commands as root. CVSSv3.1 vector indicates Physical access, Low attack com...

CVE-2021-20167

Netgear RAX43 version 1.0.3.96 contains a command injection vulnerability. The readycloud cgi application is vulnerable to command injection in the name parameter...

CVE-2021-20166

Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability. The URL parsing functionality in the cgi-bin endpoint of the router containers a buffer overrun issue that can redirection control flow of the applicaiton...

CVE-2021-20166

Netgear RAX43 firmware 1.0.3.96 is affected by a buffer overrun in the cgi-bin URL parsing endpoint (CVE-2021-20166). Nuclei templates also describe a related issue: command injection/authentication bypass in readycloud_control.cgi’s name parameter, and note that this vulnerability combines CVE-2...

CVE-2021-20171

Netgear RAX43 firmware 1.0.3.96 stores usernames and passwords for device services in plaintext on the device, with an example that the admin password is stored in plaintext in the primary configuration file. The Connected documents corroborate this plaintext credential storage. The exact root ca...

CVE-2021-20171

Netgear RAX43 version 1.0.3.96 stores sensitive information in plaintext. All usernames and passwords for the device's associated services are stored in plaintext on the device. For example, the admin password is stored in plaintext in the primary configuration file on the device...

CVE-2021-20170

Netgear RAX43 version 1.0.3.96 makes use of hardcoded credentials. It does not appear that normal users are intended to be able to manipulate configuration backups due to the fact that they are encrypted. This encryption is accomplished via a password-protected zip file with a hardcoded password...

CVE-2021-20170

Netgear RAX43 (firmware 1.0.3.96) is affected by a hardcoded credential issue. The backup configuration is encrypted with a password-protected ZIP using a hardcoded password (RAX50w!a4udk). A user who can access the backup mechanism can unzip the configuration with this password, modify settings,...

Netgear Nighthawk R6700 授权问题漏洞

The Netgear Nighthawk R6700 is a wireless router from Netgear USA. An authorization issue vulnerability exists in the Netgear Nighthawk R6700 that stems from the product's lack of adequate protection for UART console access. The vulnerability can be exploited by an attacker to execute commands as...

Netgear Nighthawk R6700 加密问题漏洞

The Netgear Nighthawk R6700 is a wireless router from Netgear, Inc. An encryption vulnerability exists in the Netgear Nighthawk R6700, which stems from the product's failure to encrypt account information. An attacker could obtain plaintext account information in the Zhu configuration file throug...

Netgear RAX43 安全漏洞

The Netgear RAX43 is a wireless router from Netgear USA. A security vulnerability exists in the Netgear RAX43 that stems from storing sensitive information in plaintext. All usernames and passwords for device-related services are stored on the device in plaintext. No details of the vulnerability...

Netgear Nighthawk R6700操作系统命令注入漏洞

The Netgear Nighthawk R6700 is a wireless router from Netgear, Inc. A command injection vulnerability exists in the Netgear Nighthawk R6700, which stems from the fact that the product supports update checking via the soap interface and can be injected with a pre-set value. No details of the...