CVEs-PoC/2021/CVE-2021-20169.md

CVE-2021-20169

Description

Netgear RAX43 version 1.0.3.96 does not utilize secure communications to the web interface. By default, all communication to/from the device is sent via HTTP, which causes potentially sensitive information (such as usernames and passwords) to be transmitted in cleartext.

POC

Reference

• https://www.tenable.com/security/research/tra-2021-55
• https://www.tenable.com/security/research/tra-2021-55

Github

No PoCs found on GitHub currently.