CVE-2021-20175: High severity netgear r6700 firmware vulnerability

Published Dec 30, 2021

Updated

Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the SOAP interface. By default, all communication to/from the device's SOAP Interface (port 5000) is sent via HTTP, which causes potentially sensitive information (such as usernames and passwords) to be transmitted in cleartext

Affected Software

2 affected components

Netgear R6700 firmware=1.0.4.120

Netgear R6700

Event History

Dec 30, 2021

CVE Published

via MITRE·09:31 PM

Data Sourced

via MITRE·09:31 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID of this security issue?

The vulnerability ID of this security issue is CVE-2021-20175.

What is the severity level of CVE-2021-20175?

The severity level of CVE-2021-20175 is high, with a CVSS score of 7.5.

What is the affected software version for CVE-2021-20175?

The affected software version for CVE-2021-20175 is Netgear Nighthawk R6700 version 1.0.4.120.

What is the potential risk of CVE-2021-20175?

CVE-2021-20175 can potentially expose sensitive information, such as usernames and passwords, due to the lack of secure communication methods in the SOAP interface of Netgear Nighthawk R6700 version 1.0.4.120.

How can I mitigate CVE-2021-20175?

To mitigate CVE-2021-20175, it is recommended to update to a firmware version that utilizes secure communication methods for the SOAP interface or apply any patches or fixes provided by Netgear.