Not rated
CVE-2021-20171 Netgear RAX43 version 1.0.3.96 stores sensitive information in plaintext
Description
Netgear RAX43 version 1.0.3.96 stores sensitive information in plaintext. All usernames and passwords for the device's associated services are stored in plaintext on the device. For example, the admin password is stored in plaintext in the primary configuration file on the device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Netgear RAX43 | 1.0.3.96 | No fix stated |
Other CVEs of Netgear RAX43
The 6 CVEs of Netgear RAX43 →
CVE-2021-20169
Netgear RAX43 version 1.0.3.96 does not utilize secure communications to the web interface
Not rated
CVE-2021-20167
Netgear RAX43 version 1.0.3.96 contains a command injection vulnerability
Not rated
CVE-2021-20168
Netgear RAX43 version 1.0.3.96 does not have sufficient protections to the UART interface
Not rated
CVE-2021-20166
Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability
Not rated