CVE-2021-45732 Hardcoded credentials in Netgear Nighthawk R6700

High 8.8 Published 30 Dec 2021 Updated 4 Aug 2024

Hardcoded credentials allow attackers to decrypt and modify router configuration backups, enabling unauthorized changes to restricted settings.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2021-45732?

CVE-2021-45732 is a high-severity vulnerability in Netgear R6700 Firmware, published on 30 Dec 2021. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Netgear Nighthawk R6700 version 1.0.4.120 makes use of a hardcoded credential. It does not appear that normal users are intended to be able to manipulate configuration backups due to the fact that they are encrypted/obfuscated. By extracting the configuration using readily available public tools, a user can reconfigure settings not intended to be manipulated, repackage the configuration, and restore a backup causing these settings to be changed.

Weakness: CWE-798

Which versions are affected by CVE-2021-45732?

It affects 1 product.

Products include Netgear R6700 Firmware.

How do I fix CVE-2021-45732?

No fix has been published for CVE-2021-45732 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-45732 being exploited?

There is no known exploitation of CVE-2021-45732 in the wild and no public exploit code.

All Netgear R6700 Firmware vulnerabilities

Sources

Also known as GHSA-6x2m-2w3q-qqp5.