CVE-2021-20170

Netgear RAX43 version 1.0.3.96 makes use of hardcoded credentials. It does not appear that normal users are intended to be able to manipulate configuration backups due to the fact that they are encrypted. This encryption is accomplished via a password-protected zip file with a hardcoded password (RAX50w!a4udk). By unzipping the configuration using this password, a user can reconfigure settings not intended to be manipulated, re-zip the configuration, and restore a backup causing these settings to be changed.

• CWE-798

• https://www.tenable.com/security/research/tra-2021-55Third Party Advisory
• https://www.tenable.com/security/research/tra-2021-55Third Party Advisory

Published

Dec 30, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-20165Trendnet AC2600 TEW-827DRU version 2.08B01 does not properly…8.8
• CVE-2021-20166Netgear RAX43 version 1.0.3.96 contains a buffer overrun vul…8.8
• CVE-2021-20167Netgear RAX43 version 1.0.3.96 contains a command injection …8
• CVE-2021-20168Netgear RAX43 version 1.0.3.96 does not have sufficient prot…6.8
• CVE-2021-20169Netgear RAX43 version 1.0.3.96 does not utilize secure commu…6.8
• CVE-2021-2017Vulnerability in the Oracle User Management product of Oracl…4.3
• CVE-2021-20171Netgear RAX43 version 1.0.3.96 stores sensitive information …5.5
• CVE-2021-20172All known versions of the Netgear Genie Installer for macOS …7.8
• CVE-2021-20173Netgear Nighthawk R6700 version 1.0.4.120 contains a command…8.8
• CVE-2021-20174Netgear Nighthawk R6700 version 1.0.4.120 does not utilize s…7.5
• CVE-2021-20175Netgear Nighthawk R6700 version 1.0.4.120 does not utilize s…7.5
• CVE-2021-20176A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and…5.5