Insecure Communications in Netgear RAX43 Web Interface

CVE-2021-20169

Summary

The Netgear RAX43, specifically version 1.0.3.96, suffers from a vulnerability where the web interface does not employ secure communication protocols. Instead, all data exchanged with the device occurs over HTTP, which can expose sensitive information such as usernames and passwords in cleartext. This flaw raises significant security concerns, as attackers could intercept unencrypted traffic and gain unauthorized access to critical data.

References