CVE-2022-41545

The administrative web interface of a Netgear C7800 Router running firmware version 6.01.07 and possibly others authenticates users via basic authentication, with an HTTP header containing a base64 value of the plaintext username and password. Because the web server also does not utilize transpor...

CVE-2022-41545

The administrative web interface of a Netgear C7800 Router running firmware version 6.01.07 (and potentially others) is vulnerable to credential theft. The device uses basic authentication , transmitting usernames and passwords as base64-encoded strings in the HTTP header. Because the web server ...