medium6.8
CVE-2021-20169
Netgear RAX43 version 1.0.3.96 does not utilize secure communications to the web interface.
Impact
Netgear RAX43 version 1.0.3.96 does not utilize secure communications to the web interface. By default, all communication to/from the device is sent via HTTP, which causes potentially sensitive information (such as usernames and passwords) to be transmitted in cleartext.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | Rax43 Firmware | Version 1.0.3.96 |