Not rated
CVE-2021-20168 Netgear RAX43 version 1.0.3.96 does not have sufficient protections to the UART interface
Description
Netgear RAX43 version 1.0.3.96 does not have sufficient protections to the UART interface. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection, login with default credentials, and execute commands as the root user. These default credentials are admin:admin.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Netgear RAX43 | 1.0.3.96 | No fix stated |
Other CVEs of Netgear RAX43
The 6 CVEs of Netgear RAX43 →
CVE-2021-20169
Netgear RAX43 version 1.0.3.96 does not utilize secure communications to the web interface
Not rated
CVE-2021-20167
Netgear RAX43 version 1.0.3.96 contains a command injection vulnerability
Not rated
CVE-2021-20166
Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability
Not rated
CVE-2021-20170
Netgear RAX43 version 1.0.3.96 makes use of hardcoded credentials
Not rated