CVE-2021-45077
First published: Thu Dec 30 2021(Updated: )
Netgear Nighthawk R6700 version 1.0.4.120 stores sensitive information in plaintext. All usernames and passwords for the device's associated services are stored in plaintext on the device. For example, the admin password is stored in plaintext in the primary configuration file on the device.
Credit: vulnreport@tenable.com vulnreport@tenable.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Netgear R6700 Firmware | =1.0.4.120 | |
| NETGEAR R6700 | ||
| All of | ||
| Netgear R6700 Firmware | =1.0.4.120 | |
| NETGEAR R6700 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-45077.
What is the severity of CVE-2021-45077?
The severity of CVE-2021-45077 is high with a severity value of 7.5.
Which Netgear device is affected by CVE-2021-45077?
Netgear Nighthawk R6700 version 1.0.4.120 is affected by CVE-2021-45077.
How does CVE-2021-45077 impact the device?
CVE-2021-45077 allows sensitive information, such as usernames and passwords, to be stored in plaintext on the device.
Is there a fix for CVE-2021-45077?
Yes, updating to a version of the Netgear Nighthawk R6700 firmware that is not affected by CVE-2021-45077 resolves the issue.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/severity
- agent/description
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/netgear
- canonical/netgear r6700 firmware
- version/netgear r6700 firmware/1.0.4.120
- canonical/netgear r6700