CVE Daily

CVE-2021-23147

Netgear Nighthawk R6700 version 1.0.4.120 does not have sufficient protections f...

Medium CVSS 6.8

Overview

Netgear Nighthawk R6700 version 1.0.4.120 does not have sufficient protections for the UART console. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection and execute commands as the root user without authentication.

CWE: CWE-287 Published: 2021-12-30T22:15:09.903
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.8 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags