CVE-2021-20171: Medium severity netgear rax43 vulnerability
Published Dec 30, 2021
·Updated
Netgear RAX43 version 1.0.3.96 stores sensitive information in plaintext. All usernames and passwords for the device's associated services are stored in plaintext on the device. For example, the admin password is stored in plaintext in the primary configuration file on the device.
Affected Software
2 affected components
Netgear Rax43 Firmware=1.0.3.96
Netgear RAX43
Event History
Dec 30, 2021
CVE Published
via MITRE·09:31 PM
Data Sourced
via MITRE·09:31 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this Netgear RAX43 issue?
The vulnerability ID for this issue is CVE-2021-20171.
2
What software version is affected by this vulnerability?
The Netgear RAX43 version 1.0.3.96 is affected by this vulnerability.
3
How does this vulnerability impact the stored sensitive information?
This vulnerability allows all usernames and passwords to be stored in plaintext on the device.
4
Is the admin password stored in plaintext in the primary configuration file?
Yes, the admin password is stored in plaintext in the primary configuration file.
5
What is the severity rating of this vulnerability?
The severity rating of this vulnerability is medium with a value of 5.5.