deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-38687
Published: 2021-12-29
Description: A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Surveillance Station. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of Surveillance Station: QTS 5.0.0 (64 bit): Surveillance Station 5.2.0.4.2 ( 2021/10/26 ) and later QTS 5.0.0 (32 bit): Surveillance Station 5.2.0.3.2 ( 2021/10/26 ) and later QTS 4.3.6 (64 bit): Surveillance Station 5.1.5.4.6 ( 2021/10/26 ) and later QTS 4.3.6 (32 bit): Surveillance Station 5.1.5.3.6 ( 2021/10/26 ) and later QTS 4.3.3: Surveillance Station 5.1.5.3.6 ( 2021/10/26 ) and later
CVSS Score: 8.1 (HIGH)
CWE: CWE-120
References: https://www.qnap.com/en/security-advisory/qsa-21-46; https://www.qnap.com/en/security-advisory/qsa-21-46
CVE: CVE-2021-38688
Published: 2021-12-29
Description: An improper authentication vulnerability has been reported to affect Android App Qfile. If exploited, this vulnerability allows attackers to compromise app and access information We have already fixed this vulnerability in the following versions of Qfile: Qfile 3.0.0.1105 and later
CVSS Score: 7.1 (HIGH)
CWE: CWE-287
References: https://www.qnap.com/en/security-advisory/qsa-21-55; https://www.qnap.com/en/security-advisory/qsa-21-55
CVE: CVE-2021-36722
Published: 2021-12-29
Description: Emuse - eServices / eNvoice SQL injection can be used in various ways ranging from bypassing login authentication or dumping the whole database to full RCE on the affected endpoints. The SQLi caused by CWE-209: Generation of Error Message Containig Sensetive Information, showing parts of the aspx code and the webroot location , information an attacker can leverage to further compromise the host.
CVSS Score: 7.1 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.gov.il/en/departments/faq/cve_advisories; https://www.gov.il/en/departments/faq/cve_advisories
CVE: CVE-2021-36723
Published: 2021-12-29
Description: Emuse - eServices / eNvoice Exposure Of Private Personal Information due to lack of identification mechanisms and predictable IDs an attacker can scrape all the files on the service.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-359, CWE-200
References: https://www.gov.il/en/departments/faq/cve_advisories; https://www.gov.il/en/departments/faq/cve_advisories
CVE: CVE-2021-4175
Published: 2021-12-29
Description: livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/livehelperchat/livehelperchat/commit/162892013eb07b21461ceffe6702140acc0fef57; https://huntr.dev/bounties/8a7d16e0-9a46-4710-a029-c89c33c01528; https://github.com/livehelperchat/livehelperchat/commit/162892013eb07b21461ceffe6702140acc0fef57
CVE: CVE-2021-4176
Published: 2021-12-29
Description: livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/livehelperchat/livehelperchat/commit/1f67cf9f251289a[PII_REDACTED]c2c3d638f9f0ba6; https://huntr.dev/bounties/8b531ae9-2d36-43ff-af33-4d81acfb2f27; https://github.com/livehelperchat/livehelperchat/commit/1f67cf9f251289a[PII_REDACTED]c2c3d638f9f0ba6
CVE: CVE-2021-23727
Published: 2021-12-29
Description: This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they could trigger a stored command injection vulnerability and potentially gain further access to the system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-77
References: https://github.com/celery/celery/blob/master/Changelog.rst%23522; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SYXRGHWHD2WWMHBWCVD5ULVINPKNY3P5/; https://snyk.io/vuln/SNYK-PYTHON-CELERY-2314953
CVE: CVE-2021-25993
Published: 2021-12-29
Description: In Requarks wiki.js, versions 2.0.0-beta.147 to 2.5.255 are affected by Stored XSS vulnerability, where a low privileged (editor) user can upload a SVG file that contains malicious JavaScript while uploading assets in the page. That will send the JWT tokens to the attacker’s server and will lead to account takeover when accessed by the victim.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/Requarks/wiki/commit/5d3e81496fba1f0fbd64eeb855f30f69a9040718; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25993; https://github.com/Requarks/wiki/commit/5d3e81496fba1f0fbd64eeb855f30f69a9040718
CVE: CVE-2021-45885
Published: 2021-12-29
Description: An issue was discovered in Stormshield Network Security (SNS) 4.2.2 through 4.2.7 (fixed in 4.2.8). Under a specific update-migration scenario, the first SSH password change does not properly clear the old password.
CVSS Score: 7.5 (HIGH)
CWE: CWE-613
References: https://advisories.stormshield.eu; https://advisories.stormshield.eu/2021-069/; https://advisories.stormshield.eu
CVE: CVE-2021-4187
Published: 2021-12-29
Description: vim is vulnerable to Use After Free
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://seclists.org/fulldisclosure/2022/Jul/14; http://seclists.org/fulldisclosure/2022/Mar/29; http://seclists.org/fulldisclosure/2022/May/35
CVE: CVE-2021-36724
Published: 2021-12-29
Description: ForeScout - SecureConnector Local Service DoS - A low privilaged user which doesn't have permissions to shutdown the secure connector service writes a large amount of characters in the installationPath. This will cause the buffer to overflow and override the stack cookie causing the service to crash.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-120
References: https://www.gov.il/en/departments/faq/cve_advisories; https://www.gov.il/en/departments/faq/cve_advisories
CVE: CVE-2021-43876
Published: 2021-12-29
Description: Microsoft SharePoint Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43876; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43876
CVE: CVE-2021-4188
Published: 2021-12-30
Description: mruby is vulnerable to NULL Pointer Dereference
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: https://github.com/mruby/mruby/commit/27d1e0132a0804581dca28df042e7047fd27eaa8; https://huntr.dev/bounties/78533fb9-f3e0-47c2-86dc-d1f96d5bea28; https://github.com/mruby/mruby/commit/27d1e0132a0804581dca28df042e7047fd27eaa8
CVE: CVE-2021-45427
Published: 2021-12-30
Description: Emerson XWEB 300D EVO 3.0.7--3ee403 is affected by: unauthenticated arbitrary file deletion due to path traversal. An attacker can browse and delete files without any authentication due to incorrect access control and directory traversal.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://drive.google.com/file/d/1IN7p9OKRgdszMVC1TKuZQDa4ySCPmQzO/view?usp=sharing; https://drive.google.com/file/d/1RegGlCrtyQwW9DUirAbPDiIHKBWgsBea/view?usp=sharing; https://drive.google.com/file/d/1iusYdheb62dom0DnvAzEiNR-e4EXSf2k/view?usp=sharing
CVE: CVE-2021-45815
Published: 2021-12-30
Description: Quectel UC20 UMTS/HSPA+ UC20 6.3.14 is affected by a Cross Site Scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://drive.google.com/file/d/1SizrkduiRFzjDcld4e9F_RV6N9DcIOQE/view?usp=sharing; https://drive.google.com/file/d/1SizrkduiRFzjDcld4e9F_RV6N9DcIOQE/view?usp=sharing
CVE: CVE-2021-45818
Published: 2021-12-30
Description: SAFARI Montage 8.7.32 is affected by a CRLF injection vulnerability which can lead to HTTP response splitting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-74
References: https://drive.google.com/file/d/19_O6Sfc0PvgEZD7m98a5heNNOp28ZfcE/view?usp=sharing; https://drive.google.com/file/d/19_O6Sfc0PvgEZD7m98a5heNNOp28ZfcE/view?usp=sharing
CVE: CVE-2021-43861
Published: 2021-12-30
Description: Mermaid is a Javascript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams. Prior to version 8.13.8, malicious diagrams can run javascript code at diagram readers' machines. Users should upgrade to version 8.13.8 to receive a patch. There are no known workarounds aside from upgrading.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20, CWE-79
References: https://github.com/mermaid-js/mermaid/commit/066b7a0d0bda274d94a2f2d21e4323dab5776d83; https://github.com/mermaid-js/mermaid/releases/tag/8.13.8; https://github.com/mermaid-js/mermaid/security/advisories/GHSA-p3rp-vmj9-gv6v
CVE: CVE-2021-43862
Published: 2021-12-30
Description: jQuery Terminal Emulator is a plugin for creating command line interpreters in your applications. Versions prior to 2.31.1 contain a low impact and limited cross-site scripting (XSS) vulnerability. The code for XSS payload is always visible, but an attacker can use other techniques to hide the code the victim sees. If the application uses the `execHash` option and executes code from URL, the attacker can use this URL to execute their code. The scope is limited because the javascript attribute used is added to span tag, so no automatic execution like with `onerror` on images is possible. This issue is fixed in version 2.31.1. As a workaround, the user can use formatting that wrap whole user input and its no op. The code for this workaround is available in the GitHub Security Advisory. The fix will only work when user of the library is not using different formatters (e.g. to highlight code in different way).
CVSS Score: 3.7 (LOW)
CWE: CWE-80, CWE-79
References: https://github.com/jcubic/jquery.terminal/commit/77eb044d0896e990d48a9157f0bc6648f81a84b5; https://github.com/jcubic/jquery.terminal/issues/727; https://github.com/jcubic/jquery.terminal/releases/tag/2.31.1
CVE: CVE-2020-29292
Published: 2021-12-30
Description: iBall WRD12EN 1.0.0 devices allow cross-site request forgery (CSRF) attacks as demonstrated by enabling DNS settings or modifying the range for IP addresses.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/Nitya91/iBall-WRD12EN-1.0.0; https://www.iball.co.in/; https://github.com/Nitya91/iBall-WRD12EN-1.0.0
CVE: CVE-2021-38876
Published: 2021-12-30
Description: IBM i 7.2, 7.3, and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 208404.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/208404; https://www.ibm.com/support/pages/node/6537250; https://exchange.xforce.ibmcloud.com/vulnerabilities/208404
CVE: CVE-2021-45379
Published: 2021-12-30
Description: Glewlwyd 2.0.0, fixed in 2.6.1 is affected by an incorrect access control vulnerability. One user can attempt to log in as another user without its password.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://github.com/babelouest/glewlwyd/commit/125281f1c0d4b6a8b49f7e55a757205a2ef01fbe; https://github.com/babelouest/glewlwyd/releases/tag/v2.6.1; https://github.com/babelouest/glewlwyd/commit/125281f1c0d4b6a8b49f7e55a757205a2ef01fbe
CVE: CVE-2021-20132
Published: 2021-12-30
Description: Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 use default hard-coded credentials, which can allow a remote attacker to gain administrative access to the zebra or ripd those services. Both are running with root privileges on the router (i.e., as the "admin" user, UID 0).
CVSS Score: 8.8 (HIGH)
CWE: CWE-798
References: https://www.tenable.com/security/research/tra-2021-44; https://www.tenable.com/security/research/tra-2021-44
CVE: CVE-2021-20133
Published: 2021-12-30
Description: Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vulnerability that allows a remote, authenticated attacker to set the "message of the day" banner to any file on the system, allowing them to read all or some of the contents of those files. Such sensitive information as hashed credentials, hardcoded plaintext passwords for other services, configuration files, and private keys can be disclosed in this fashion. Improper handling of filenames that identify virtual resources, such as "/dev/urandom" allows an attacker to effect a denial of service attack against the command line interfaces of the Quagga services (zebra and ripd).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-22
References: https://www.tenable.com/security/research/tra-2021-44; https://www.tenable.com/security/research/tra-2021-44
CVE: CVE-2021-20134
Published: 2021-12-30
Description: Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vulnerability that allows a remote, authenticated attacker to set an arbitrary file on the router's filesystem as the log file used by either Quagga service (zebra or ripd). Subsequent log messages will be appended to the file, prefixed by a timestamp and some logging metadata. Remote code execution can be achieved by using this vulnerability to append to a shell script on the router's filesystem, and then awaiting or triggering the execution of that script. A remote, unauthenticated root shell can easily be obtained on the device in this fashion.
CVSS Score: 8.4 (HIGH)
CWE: CWE-22
References: https://www.tenable.com/security/research/tra-2021-44; https://www.tenable.com/security/research/tra-2021-44
CVE: CVE-2021-20149
Published: 2021-12-30
Description: Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN interface. The default iptables ruleset for governing access to services on the device only apply to IPv4. All services running on the devices are accessible via the WAN interface via IPv6 by default.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://www.tenable.com/security/research/tra-2021-54; https://www.tenable.com/security/research/tra-2021-54
CVE: CVE-2021-20150
Published: 2021-12-30
Description: Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from the setup wizard. Authentication can be bypassed and a user may view information as Admin by manually browsing to the setup wizard and forcing it to redirect to the desired page.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: https://www.tenable.com/security/research/tra-2021-54; https://www.tenable.com/security/research/tra-2021-54
CVE: CVE-2021-20151
Published: 2021-12-30
Description: Trendnet AC2600 TEW-827DRU version 2.08B01 contains a flaw in the session management for the device. The router's management software manages web sessions based on IP address rather than verifying client cookies/session tokens/etc. This allows an attacker (whether from a different computer, different web browser on the same machine, etc.) to take over an existing session. This does require the attacker to be able to spoof or take over original IP address of the original user's session.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-384
References: https://www.tenable.com/security/research/tra-2021-54; https://www.tenable.com/security/research/tra-2021-54
CVE: CVE-2021-20152
Published: 2021-12-30
Description: Trendnet AC2600 TEW-827DRU version 2.08B01 lacks proper authentication to the bittorrent functionality. If enabled, anyone is able to visit and modify settings and files via the Bittorent web client by visiting: http://192.168.10.1:9091/transmission/web/
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-306
References: https://www.tenable.com/security/research/tra-2021-54; https://www.tenable.com/security/research/tra-2021-54
CVE: CVE-2021-20153
Published: 2021-12-30
Description: Trendnet AC2600 TEW-827DRU version 2.08B01 contains a symlink vulnerability in the bittorrent functionality. If enabled, the bittorrent functionality is vulnerable to a symlink attack that could lead to remote code execution on the device. If an end user inserts a flash drive with a malicious symlink on it that the bittorrent client can write downloads to, then a user is able to download arbitrary files to any desired location on the devices filesystem, which could lead to remote code execution. Example directories vulnerable to this include "config", "downloads", and "torrents", though it should be noted that "downloads" is the only vector that allows for arbitrary files to be downloaded to arbitrary locations.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-59
References: https://www.tenable.com/security/research/tra-2021-54; https://www.tenable.com/security/research/tra-2021-54
CVE: CVE-2021-20154
Published: 2021-12-30
Description: Trendnet AC2600 TEW-827DRU version 2.08B01 contains an security flaw in the web interface. HTTPS is not enabled on the device by default. This results in cleartext transmission of sensitive information such as passwords.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://www.tenable.com/security/research/tra-2021-54; https://www.tenable.com/security/research/tra-2021-54
CVE: CVE-2021-20155
Published: 2021-12-30
Description: Trendnet AC2600 TEW-827DRU version 2.08B01 makes use of hardcoded credentials. It is possible to backup and restore device configurations via the management web interface. These devices are encrypted using a hardcoded password of "12345678".
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://www.tenable.com/security/research/tra-2021-54; https://www.tenable.com/security/research/tra-2021-54
CVE: CVE-2021-20156
Published: 2021-12-30
Description: Trendnet AC2600 TEW-827DRU version 2.08B01 contains an improper access control configuration that could allow for a malicious firmware update. It is possible to manually install firmware that may be malicious in nature as there does not appear to be any signature validation done to determine if it is from a known and trusted source. This includes firmware updates that are done via the automated "check for updates" in the admin interface. If an attacker is able to masquerade as the update server, the device will not verify that the firmware updates downloaded are legitimate.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-347
References: https://www.tenable.com/security/research/tra-2021-54; https://www.tenable.com/security/research/tra-2021-54
CVE: CVE-2021-20157
Published: 2021-12-30
Description: It is possible for an unauthenticated, malicious user to force the device to reboot due to a hidden administrative command.
CVSS Score: 7.5 (HIGH)
References: https://www.tenable.com/security/research/tra-2021-54; https://www.tenable.com/security/research/tra-2021-54
CVE: CVE-2021-20158
Published: 2021-12-30
Description: Trendnet AC2600 TEW-827DRU version 2.08B01 contains an authentication bypass vulnerability. It is possible for an unauthenticated, malicous actor to force the change of the admin password due to a hidden administrative command.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://www.tenable.com/security/research/tra-2021-54; https://www.tenable.com/security/research/tra-2021-54
CVE: CVE-2021-20159
Published: 2021-12-30
Description: Trendnet AC2600 TEW-827DRU version 2.08B01 is vulnerable to command injection. The system log functionality of the firmware allows for command injection as root by supplying a malformed parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.tenable.com/security/research/tra-2021-54; https://www.tenable.com/security/research/tra-2021-54
CVE: CVE-2021-20160
Published: 2021-12-30
Description: Trendnet AC2600 TEW-827DRU version 2.08B01 contains a command injection vulnerability in the smb functionality of the device. The username parameter used when configuring smb functionality for the device is vulnerable to command injection as root.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.tenable.com/security/research/tra-2021-54; https://www.tenable.com/security/research/tra-2021-54
CVE: CVE-2021-20161
Published: 2021-12-30
Description: Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART functionality. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection. No username or password is required and the user is given a root shell with full control of the device.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287, CWE-306
References: https://www.tenable.com/security/research/tra-2021-54; https://www.tenable.com/security/research/tra-2021-54
CVE: CVE-2021-20162
Published: 2021-12-30
Description: Trendnet AC2600 TEW-827DRU version 2.08B01 stores credentials in plaintext. Usernames and passwords are stored in plaintext in the config files on the device. For example, /etc/config/cameo contains the admin password in plaintext.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-312
References: https://www.tenable.com/security/research/tra-2021-54; https://www.tenable.com/security/research/tra-2021-54
CVE: CVE-2021-20163
Published: 2021-12-30
Description: Trendnet AC2600 TEW-827DRU version 2.08B01 leaks information via the ftp web page. Usernames and passwords for all ftp users are revealed in plaintext on the ftpserver.asp page.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-522
References: https://www.tenable.com/security/research/tra-2021-54; https://www.tenable.com/security/research/tra-2021-54
CVE: CVE-2021-20164
Published: 2021-12-30
Description: Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses credentials for the smb functionality of the device. Usernames and passwords for all smb users are revealed in plaintext on the smbserver.asp page.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-522
References: https://www.tenable.com/security/research/tra-2021-54; https://www.tenable.com/security/research/tra-2021-54
CVE: CVE-2021-20165
Published: 2021-12-30
Description: Trendnet AC2600 TEW-827DRU version 2.08B01 does not properly implement csrf protections. Most pages lack proper usage of CSRF protections or mitigations. Additionally, pages that do make use of CSRF tokens are trivially bypassable as the server does not appear to validate them properly (i.e. re-using an old token or finding the token thru some other method is possible).
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.tenable.com/security/research/tra-2021-54; https://www.tenable.com/security/research/tra-2021-54
CVE: CVE-2021-20166
Published: 2021-12-30
Description: Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability. The URL parsing functionality in the cgi-bin endpoint of the router containers a buffer overrun issue that can redirection control flow of the applicaiton.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://www.tenable.com/security/research/tra-2021-55; https://www.tenable.com/security/research/tra-2021-55
CVE: CVE-2021-20167
Published: 2021-12-30
Description: Netgear RAX43 version 1.0.3.96 contains a command injection vulnerability. The readycloud cgi application is vulnerable to command injection in the name parameter.
CVSS Score: 8.0 (HIGH)
CWE: CWE-77
References: https://www.tenable.com/security/research/tra-2021-55; https://www.tenable.com/security/research/tra-2021-55
CVE: CVE-2021-20168
Published: 2021-12-30
Description: Netgear RAX43 version 1.0.3.96 does not have sufficient protections to the UART interface. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection, login with default credentials, and execute commands as the root user. These default credentials are admin:admin.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: https://www.tenable.com/security/research/tra-2021-55; https://www.tenable.com/security/research/tra-2021-55
CVE: CVE-2021-20169
Published: 2021-12-30
Description: Netgear RAX43 version 1.0.3.96 does not utilize secure communications to the web interface. By default, all communication to/from the device is sent via HTTP, which causes potentially sensitive information (such as usernames and passwords) to be transmitted in cleartext.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-319
References: https://www.tenable.com/security/research/tra-2021-55; https://www.tenable.com/security/research/tra-2021-55