Non notée
CVE-2021-20169 Netgear RAX43 version 1.0.3.96 does not utilize secure communications to the web interface
Description
Netgear RAX43 version 1.0.3.96 does not utilize secure communications to the web interface. By default, all communication to/from the device is sent via HTTP, which causes potentially sensitive information (such as usernames and passwords) to be transmitted in cleartext.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Netgear RAX43 | 1.0.3.96 | Pas de correctif indiqué |
Autres CVE de Netgear RAX43
Les 6 CVE de Netgear RAX43 →
CVE-2021-20167
Netgear RAX43 version 1.0.3.96 contains a command injection vulnerability
Non notée
CVE-2021-20168
Netgear RAX43 version 1.0.3.96 does not have sufficient protections to the UART interface
Non notée
CVE-2021-20166
Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability
Non notée
CVE-2021-20170
Netgear RAX43 version 1.0.3.96 makes use of hardcoded credentials
Non notée