Vulnerability · Published Dec 30, 2021 · Assigned by tenable

CVE-2021-45732

High 8.8

In plain English

A high-severity security flaw in Netgear Nighthawk R6700. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).

Severity (CVSS NVD)8.8High

Exploit odds (30 days)0.8%top 42.9% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Netgear Nighthawk R6700 version 1.0.4.120 makes use of a hardcoded credential. It does not appear that normal users are intended to be able to manipulate configuration backups due to the fact that they are encrypted/obfuscated. By extracting the configuration using readily available public tools, a user can reconfigure settings not intended to be manipulated, repackage the configuration, and restore a backup causing these settings to be changed.

Affected products (as reported)

Vendor	Product	Versions
n/a	Netgear Nighthawk R6700	1.0.4.120

References

https://www.tenable.com/security/research/tra-2021-57 x_refsource_MISC