CVE-2021-20169

Netgear RAX43 version 1.0.3.96 does not utilize secure communications to the web interface

published December 30, 2021

CVSS
—
EPSS
0%
Percentile
6.4
In the wild
Unconfirmed
What it is

Netgear RAX43 version 1.0.3.96 does not utilize secure communications to the web interface. By default, all communication to/from the device is sent via HTTP, which causes potentially sensitive information (such as usernames and passwords) to be transmitted in cleartext.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00173 · 6.4th percentile
Published
2021-12-30T21:31Z
EPSS history
Timeline
  • 30 DEC 21:31Z
    Netgear RAX43 version 1.0.3.96 does not utilize secure communications to the web interface
    cvelistv5