CVE-2019-20646

NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of administrative credentials

published April 15, 2020

CVSS
—
EPSS
1%
Percentile
70.0
In the wild
Unconfirmed
What it is

⚠️ Your NETGEAR RAX40 could be unintentionally sharing admin credentials like a barista handing out free coffee with every order! ☕️ Imagine you walk into your favorite cafe and the barista starts announcing your secret coffee order to the entire shop — that’s what’s happening with these credentials! Anyone within earshot could overhear just like an attacker could potentially snag your admin details. If someone were to exploit this vulnerability, they could gain access to your router settings and make changes that could compromise your entire network — think of it as a stranger waltzing into your home and changing your locks! This could lead to unauthorized access to your personal data or even control over your smart devices.

Put simply

Imagine you walk into your favorite cafe and the barista starts announcing your secret coffee order to the entire shop — that’s what’s happening with these credentials! Anyone within earshot could overhear just like an attacker could potentially snag your admin details. This vulnerability allows attackers to disclose administrative credentials from NETGEAR RAX40 devices running versions prior to 1.0.3.64. It’s particularly concerning because compromised credentials can lead to unauthorized access and control of the device.

What to do

If someone were to exploit this vulnerability, they could gain access to your router settings and make changes that could compromise your entire network — think of it as a stranger waltzing into your home and changing your locks! This could lead to unauthorized access to your personal data or even control over your smart devices. To safeguard your network, promptly update your NETGEAR RAX40 to version 1.0.3.64 or later. Regularly check for firmware updates and change your default credentials to something more secure to make it harder for potential intruders! You've got this! With just a few clicks, you'll have your network secured and operating smoothly. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01288 · 70.0th percentile
Published
2020-04-15T17:25Z
EPSS history
Timeline
  • 15 APR 17:25Z
    NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of administrative credentials
    cvelistv5