Description
An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which could allow an attacker to perform attacker-in-the-middle (MiTM) style attacks impacting the product's confidentiality. This vulnerability affects the listed NETGEAR models.
CVSS breakdown
CVSS 4.0
Attack Vector
Network
Attack Complexity
High
Attack Requirements
Present
Privileges Required
None
User Interaction
None
Confidentiality (Vulnerable System)
High
Integrity (Vulnerable System)
None
Availability (Vulnerable System)
None
Confidentiality (Subsequent System)
None
Integrity (Subsequent System)
None
Availability (Subsequent System)
None
E
Unchanged
Affected products
- NETGEAR / RAX120v10 – V1.2.9.52
- NETGEAR / RAX120v20 – V1.2.9.52
- NETGEAR / RAX350 – V1.0.6.106
- NETGEAR / RAX380 – V1.0.6.106
- NETGEAR / RAX400 – V1.0.6.106