CVE-2021-20171

Netgear RAX43 version 1.0.3.96 stores sensitive information in plaintext. All usernames and passwords for the device's associated services are stored in plaintext on the device. For example, the admin password is stored in plaintext in the primary configuration file on the device.

• CWE-312

• https://www.tenable.com/security/research/tra-2021-55Third Party Advisory
• https://www.tenable.com/security/research/tra-2021-55Third Party Advisory

Published

Dec 30, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-20166Netgear RAX43 version 1.0.3.96 contains a buffer overrun vul…8.8
• CVE-2021-20167Netgear RAX43 version 1.0.3.96 contains a command injection …8
• CVE-2021-20168Netgear RAX43 version 1.0.3.96 does not have sufficient prot…6.8
• CVE-2021-20169Netgear RAX43 version 1.0.3.96 does not utilize secure commu…6.8
• CVE-2021-2017Vulnerability in the Oracle User Management product of Oracl…4.3
• CVE-2021-20170Netgear RAX43 version 1.0.3.96 makes use of hardcoded creden…8.8
• CVE-2021-20172All known versions of the Netgear Genie Installer for macOS …7.8
• CVE-2021-20173Netgear Nighthawk R6700 version 1.0.4.120 contains a command…8.8
• CVE-2021-20174Netgear Nighthawk R6700 version 1.0.4.120 does not utilize s…7.5
• CVE-2021-20175Netgear Nighthawk R6700 version 1.0.4.120 does not utilize s…7.5
• CVE-2021-20176A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and…5.5
• CVE-2021-20177A flaw was found in the Linux kernel's implementation of str…4.4