CVE-2021-20174

Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the web interface

published December 30, 2021

CVSS
—
EPSS
1%
Percentile
47.4
In the wild
Unconfirmed
What it is

Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the web interface. By default, all communication to/from the device's web interface is sent via HTTP, which causes potentially sensitive information (such as usernames and passwords) to be transmitted in cleartext.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00589 · 47.4th percentile
Published
2021-12-30T21:31Z
EPSS history
Timeline
  • 30 DEC 21:31Z
    Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the web interface
    cvelistv5