CVE-2021-20174

HIGH

Netgear Nighthawk R6700 1.0.4.120 - Cleartext Transmission of Sensitive Information

Title source: llm
STIX 2.1

Description

Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the web interface. By default, all communication to/from the device's web interface is sent via HTTP, which causes potentially sensitive information (such as usernames and passwords) to be transmitted in cleartext.

References (1)

Core 1
Core References
Third Party Advisory x_refsource_misc
https://www.tenable.com/security/research/tra-2021-57

Scores

CVSS v3 7.5
EPSS 0.0015
EPSS Percentile 34.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-319
Status published
Products (1)
netgear/r6700_firmware 1.0.4.120
Published Dec 30, 2021
Tracked Since Feb 18, 2026