Not rated
CVE-2021-20175 Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the SOAP interface
Description
Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the SOAP interface. By default, all communication to/from the device's SOAP Interface (port 5000) is sent via HTTP, which causes potentially sensitive information (such as usernames and passwords) to be transmitted in cleartext
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Netgear Nighthawk R6700 | 1.0.4.120 | No fix stated |
Other CVEs of Netgear Nighthawk R6700
The 6 CVEs of Netgear Nighthawk R6700 →
CVE-2021-20174
Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the web interface
Not rated
CVE-2021-20173
Netgear Nighthawk R6700 version 1.0.4.120 contains a command injection vulnerability in update functionality of the…
Not rated
CVE-2021-45077
Netgear Nighthawk R6700 version 1.0.4.120 stores sensitive information in plaintext
Not rated
CVE-2021-23147
Netgear Nighthawk R6700 version 1.0.4.120 does not have sufficient protections for the UART console
Not rated