Basic Authentication Vulnerability in Netgear C7800 Router

CVE-2022-41545

Summary

The administrative web interface of the Netgear C7800 Router is susceptible to a basic authentication flaw, allowing the transmission of sensitive login credentials as a base64 encoded value within HTTP headers. This occurs over unsecured connections, making it possible for attackers to easily intercept user credentials during network communication. The lack of inherent transport security in the router’s configuration exacerbates the risk, especially in scenarios involving man-in-the-middle attacks. Users are strongly advised to mitigate this risk by ensuring secure communication channels and considering alternative security measures.

References