CVE-2021-20170: High severity netgear rax43 vulnerability
Netgear RAX43 version 1.0.3.96 makes use of hardcoded credentials. It does not appear that normal users are intended to be able to manipulate configuration backups due to the fact that they are encrypted. This encryption is accomplished via a password-protected zip file with a hardcoded password (RAX50w!a4udk). By unzipping the configuration using this password, a user can reconfigure settings not intended to be manipulated, re-zip the configuration, and restore a backup causing these settings to be changed.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-20170.
What is the severity of CVE-2021-20170?
The severity of CVE-2021-20170 is high with a CVSS score of 8.8.
What is the affected software for CVE-2021-20170?
The affected software for CVE-2021-20170 is Netgear RAX43 version 1.0.3.96.
What is the vulnerability description of CVE-2021-20170?
CVE-2021-20170 is a vulnerability in Netgear RAX43 version 1.0.3.96 that makes use of hardcoded credentials.
How do I fix CVE-2021-20170?
To fix CVE-2021-20170, it is recommended to update the firmware of the Netgear RAX43 device to a version that does not have the vulnerability.