Vulnerability · Published Dec 30, 2021 · Assigned by tenable
CVE-2021-20171
Medium 5.5
In plain English
A medium-severity security flaw in Netgear RAX43. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).
Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 90.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Netgear RAX43 version 1.0.3.96 stores sensitive information in plaintext. All usernames and passwords for the device's associated services are stored in plaintext on the device. For example, the admin password is stored in plaintext in the primary configuration file on the device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Netgear RAX43 | 1.0.3.96 |
References
- https://www.tenable.com/security/research/tra-2021-55 x_refsource_MISC