CVE-2021-23147

Netgear Nighthawk R6700 version 1.0.4.120 does not have sufficient protections for the UART console

published December 30, 2021

CVSS
—
EPSS
0%
Percentile
29.1
In the wild
Unconfirmed
What it is

Netgear Nighthawk R6700 version 1.0.4.120 does not have sufficient protections for the UART console. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection and execute commands as the root user without authentication.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00364 · 29.1th percentile
Published
2021-12-30T21:31Z
EPSS history
Timeline
  • 30 DEC 21:31Z
    Netgear Nighthawk R6700 version 1.0.4.120 does not have sufficient protections for the UART console
    cvelistv5