CVE-2021-20174: High severity netgear r6700 firmware vulnerability
Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the web interface. By default, all communication to/from the device's web interface is sent via HTTP, which causes potentially sensitive information (such as usernames and passwords) to be transmitted in cleartext.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-20174?
CVE-2021-20174 refers to a vulnerability in Netgear Nighthawk R6700 version 1.0.4.120 where the web interface does not utilize secure communication methods, leading to potentially sensitive information being transmitted in clear text.
How does CVE-2021-20174 impact Netgear Nighthawk R6700 version 1.0.4.120?
CVE-2021-20174 allows for usernames and passwords to be transmitted in clear text when accessing the web interface of the Netgear Nighthawk R6700 version 1.0.4.120.
What is the severity of CVE-2021-20174?
CVE-2021-20174 has a severity rating of high, with a CVSS score of 7.5.
How can I fix CVE-2021-20174?
To fix CVE-2021-20174, it is recommended to update the firmware of the Netgear Nighthawk R6700 to a version that utilizes secure communication methods for the web interface.
Where can I find more information about CVE-2021-20174?
More information about CVE-2021-20174 can be found at the following reference: https://www.tenable.com/security/research/tra-2021-57