Not rated
CVE-2021-20169 Netgear RAX43 version 1.0.3.96 does not utilize secure communications to the web interface
Description
Netgear RAX43 version 1.0.3.96 does not utilize secure communications to the web interface. By default, all communication to/from the device is sent via HTTP, which causes potentially sensitive information (such as usernames and passwords) to be transmitted in cleartext.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Netgear RAX43 | 1.0.3.96 | No fix stated |
Other CVEs of Netgear RAX43
The 6 CVEs of Netgear RAX43 →
CVE-2021-20167
Netgear RAX43 version 1.0.3.96 contains a command injection vulnerability
Not rated
CVE-2021-20168
Netgear RAX43 version 1.0.3.96 does not have sufficient protections to the UART interface
Not rated
CVE-2021-20166
Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability
Not rated
CVE-2021-20170
Netgear RAX43 version 1.0.3.96 makes use of hardcoded credentials
Not rated