CVE-2021-20174

Name of the Vulnerable Software and Affected Versions: Netgear Nighthawk R6700 version 1.0.4.120

Description: The issue concerns the lack of secure communication methods to the web interface. By default, all communication to and from the device's web interface is sent via HTTP, causing potentially sensitive information, such as username and password, to be transmitted in cleartext.

Recommendations: For Netgear Nighthawk R6700 version 1.0.4.120, consider configuring the device to use HTTPS for secure communication to the web interface as a temporary workaround. Restrict access to the web interface to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.