What is CVE-2021-45077?

CVE-2021-45077 is a high-severity vulnerability in NETGEAR R6700, classified under Cleartext Storage of Sensitive Information. CVSS score: 7.5/10. Published 2021-12-30.

How severe is CVE-2021-45077?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in NETGEAR R6700

CVE-2021-45077

Netgear Nighthawk R6700 version 1.0.4.120 stores sensitive information in plaintext. All usernames and passwords for the device's associated services are stored in plaintext on the device. For example, the admin password is stored in plaintext in the primary configuration file on the device.

EPSS: 0.006 (44.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Netgear R6700
Netgear R6700_firmware — versions 1.0.4.120
N/a Netgear Nighthawk R6700 — versions 1.0.4.120

Weakness classification (CWE)

CWE-312 — Cleartext Storage of Sensitive Information

References

vulnreport@tenable.com (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-45077?: CVE-2021-45077 is a high-severity vulnerability in NETGEAR R6700, classified under Cleartext Storage of Sensitive Information. CVSS score: 7.5/10. Published 2021-12-30.
How severe is CVE-2021-45077?: High severity. CVSS v3 base score is 7.5 out of 10.