Insecure Communication Vulnerability in Netgear Nighthawk R6700 Router
CVE-2021-20174

7.5HIGH

Key Information:

Vendor
Netgear
Status
Netgear Nighthawk R6700
Vendor
CVE Published:
30 December 2021

Summary

The Netgear Nighthawk R6700 router, specifically version 1.0.4.120, presents an insecure communication vulnerability due to the lack of secure methods for transmitting data to and from the web interface. This device relies on HTTP protocols by default, which can expose potentially sensitive information, including usernames and passwords, in cleartext. As a result, attackers could intercept and exploit this data, posing a serious threat to the device's users.

Affected Version(s)

Netgear Nighthawk R6700 1.0.4.120

References

https://www.tenable.com/security/research/tra-2021-57
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.