NETGEAR R6700 Firmware 1.0.4.120
Approved changes feed: RSS · Atom
cpe:2.3:o:netgear:r6700_firmware:1.0.4.120:*:*:*:*:*:*:*
part: o version: 1.0.4.120 update: *
| Vendor | Netgear (99700297-c207-56f4-abd0-97ab0c8bf3ab) |
|---|---|
| Product | R6700 Firmware (0c9d6bad-4e3f-5451-923c-03a8b7b72ef3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:netgear/netgear-open-source-code-for-programmers-gpl |
purl2cpe | 2026-06-01 10:11:41.254687 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-45732 |
vulnerable | 2026-06-08 05:36:49.359281 |
Details available
Netgear Nighthawk R6700 version 1.0.4.120 makes use of a hardcoded credential. It does not appear that normal users are intended to be able to manipulate configuration backups due to the fact that they are encrypted/obfuscated. By extracting the configuration using readily available public tools, a user can reconfigure settings not intended to be manipulated, repackage the configuration, and restore a backup causing these settings to be changed.
Published: 2021-12-30T21:31:20.000Z
Updated: 2024-08-04T04:47:02.172Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45077 |
vulnerable | 2026-06-08 05:36:47.774431 |
Details available
Netgear Nighthawk R6700 version 1.0.4.120 stores sensitive information in plaintext. All usernames and passwords for the device's associated services are stored in plaintext on the device. For example, the admin password is stored in plaintext in the primary configuration file on the device.
Published: 2021-12-30T21:31:21.000Z
Updated: 2024-08-04T04:32:13.607Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23147 |
vulnerable | 2026-06-08 05:30:02.297469 |
Details available
Netgear Nighthawk R6700 version 1.0.4.120 does not have sufficient protections for the UART console. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection and execute commands as the root user without authentication.
Published: 2021-12-30T21:31:20.000Z
Updated: 2024-08-03T18:58:26.298Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20175 |
vulnerable | 2026-06-08 05:29:08.636099 |
Details available
Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the SOAP interface. By default, all communication to/from the device's SOAP Interface (port 5000) is sent via HTTP, which causes potentially sensitive information (such as usernames and passwords) to be transmitted in cleartext
Published: 2021-12-30T21:31:23.000Z
Updated: 2024-08-03T17:30:07.419Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20174 |
vulnerable | 2026-06-08 05:29:08.635747 |
Details available
Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the web interface. By default, all communication to/from the device's web interface is sent via HTTP, which causes potentially sensitive information (such as usernames and passwords) to be transmitted in cleartext.
Published: 2021-12-30T21:31:23.000Z
Updated: 2024-08-03T17:30:07.580Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20173 |
vulnerable | 2026-06-08 05:29:08.634566 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.