What’s Vulnerable › Vulnerabilities

CVE-2021-20171

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-12-30 · updated 2026-06-17
• Weakness: CWE-312

Description

Netgear RAX43 version 1.0.3.96 stores sensitive information in plaintext. All usernames and passwords for the device's associated services are stored in plaintext on the device. For example, the admin password is stored in plaintext in the primary configuration file on the device.

Affected products

• Netgear RAX43: 1.0.3.96

References

• https://www.tenable.com/security/research/tra-2021-55
• https://www.tenable.com/security/research/tra-2021-55

Get alerted when CVE-2021-20171 or the next vulnerability affects your stack