PT-2021-15393 · NetGear · Netgear Nighthawk R6700

Published 2021-12-30 · Updated 2022-01-11 · CVE-2021-23147

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Netgear Nighthawk R6700 version 1.0.4.120

Description The issue concerns insufficient protections for the UART console, allowing a malicious actor with physical access to the device to connect to the UART port via a serial connection and execute commands as the root user without authentication.

Recommendations For Netgear Nighthawk R6700 version 1.0.4.120, as a temporary workaround, consider restricting physical access to the device to minimize the risk of exploitation.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2021-23147

Affected Products

Netgear Nighthawk R6700

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-23147 · Security Note
• https://osv.dev/vulnerability/CVE-2021-23147 · Vendor Advisory
• https://tenable.com/security/research/tra-2021-57 · Note