CVE-2021-20175

Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the SOAP interface

published December 30, 2021

CVSS
—
EPSS
1%
Percentile
47.2
In the wild
Unconfirmed
What it is

Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the SOAP interface. By default, all communication to/from the device's SOAP Interface (port 5000) is sent via HTTP, which causes potentially sensitive information (such as usernames and passwords) to be transmitted in cleartext

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00589 · 47.2th percentile
Published
2021-12-30T21:31Z
EPSS history
Timeline
  • 30 DEC 21:31Z
    Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the SOAP interface
    cvelistv5