CVE-2021-20169: NETGEAR RAX43 Firmware

Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Netgear RAX43 version 1.0.3.96 does not utilize secure communications to the web interface. By default, all communication to/from the device is sent via HTTP, which causes potentially sensitive information (such as usernames and passwords) to be transmitted in cleartext.

Affected products

• NETGEAR RAX43 Firmware: version 1.0.3.96 only

Published 2021-12-30. Last modified 2026-06-17.