1. Home
  2. CVE Database
  3. CVE-2021-20171
MEDIUM · 5.5

CVE-2021-20171

Netgear RAX43 version 1.0.3.96 stores sensitive information in plaintext. All usernames and passwords for the device's associated services are stored in plaintext on the device. For example, the admin...

Vulnerability Description

Netgear RAX43 version 1.0.3.96 stores sensitive information in plaintext. All usernames and passwords for the device's associated services are stored in plaintext on the device. For example, the admin password is stored in plaintext in the primary configuration file on the device.

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
NetgearRax43 Firmware1.0.3.96
NetgearRax43-

Related Weaknesses (CWE)

CWE-312

References

FAQ

What is CVE-2021-20171?

CVE-2021-20171 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Netgear RAX43 version 1.0.3.96 stores sensitive information in plaintext. All usernames and passwords for the device's associated services are stored in plaintext on the device. For example, the admin...

How severe is CVE-2021-20171?

CVE-2021-20171 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-20171?

Check the references section above for vendor advisories and patch information. Affected products include: Netgear Rax43 Firmware, Netgear Rax43.