CVE-2022-41545

Summary

CVE-2022-41545 is a vulnerability affecting the administrative web interface of certain Netgear C7800 Routers, including those running firmware version 6.01.07. The issue lies in the use of basic authentication, where username and password are encoded in base64 and transmitted over an unsecured connection. An attacker who manages to perform a man-in-the-middle attack can intercept and decipher these credentials, posing a significant risk to the router's security. The vulnerability puts administrative credentials at risk during every authenticated request over both WLAN and LAN connections.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.