Non notée
CVE-2021-20168 Netgear RAX43 version 1.0.3.96 does not have sufficient protections to the UART interface
Description
Netgear RAX43 version 1.0.3.96 does not have sufficient protections to the UART interface. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection, login with default credentials, and execute commands as the root user. These default credentials are admin:admin.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Netgear RAX43 | 1.0.3.96 | Pas de correctif indiqué |
Autres CVE de Netgear RAX43
Les 6 CVE de Netgear RAX43 →
CVE-2021-20169
Netgear RAX43 version 1.0.3.96 does not utilize secure communications to the web interface
Non notée
CVE-2021-20167
Netgear RAX43 version 1.0.3.96 contains a command injection vulnerability
Non notée
CVE-2021-20166
Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability
Non notée
CVE-2021-20170
Netgear RAX43 version 1.0.3.96 makes use of hardcoded credentials
Non notée