Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-45732

Опубликовано: 30 дек. 2021
Источник: nvd
CVSS3: 8.8
CVSS2: 6.5
EPSS Низкий

Описание

Netgear Nighthawk R6700 version 1.0.4.120 makes use of a hardcoded credential. It does not appear that normal users are intended to be able to manipulate configuration backups due to the fact that they are encrypted/obfuscated. By extracting the configuration using readily available public tools, a user can reconfigure settings not intended to be manipulated, repackage the configuration, and restore a backup causing these settings to be changed.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:netgear:r6700_firmware:1.0.4.120:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*

EPSS

Процентиль: 52%
0.00288
Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-798

Связанные уязвимости

github
около 4 лет назад

Netgear Nighthawk R6700 version 1.0.4.120 makes use of a hardcoded credential. It does not appear that normal users are intended to be able to manipulate configuration backups due to the fact that they are encrypted/obfuscated. By extracting the configuration using readily available public tools, a user can reconfigure settings not intended to be manipulated, repackage the configuration, and restore a backup causing these settings to be changed.

EPSS

Процентиль: 52%
0.00288
Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-798