Plaintext Credential Storage in Netgear Nighthawk Router

CVE-2021-45077

What is CVE-2021-45077?

The Netgear Nighthawk R6700 router version 1.0.4.120 exposes sensitive information by storing all usernames and passwords in plaintext on the device. This practice poses significant risks to user security, as it makes it easy for unauthorized individuals to access sensitive configurations and take control of associated services. Proper handling and encryption of credentials are crucial to maintain the integrity and security of the device.

References