Netgear RAX43 version 1.0.3.96 does not have sufficient...
High severity
Unreviewed
Published
Dec 31, 2021
to the GitHub Advisory Database
•
Updated Jan 27, 2023
Description
Published by the National Vulnerability Database
Dec 30, 2021
Published to the GitHub Advisory Database
Dec 31, 2021
Last updated
Jan 27, 2023
Netgear RAX43 version 1.0.3.96 does not have sufficient protections to the UART interface. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection, login with default credentials, and execute commands as the root user. These default credentials are admin:admin.
References