How severe is CVE-2022-41545?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 6.4 out of 10.

What type of vulnerability is CVE-2022-41545?

This is classified as CWE-319, which is a common weakness in software security.

CVE-2022-41545 - MEDIUM Severity | CVSS 6.4

Vulnerability Description

The administrative web interface of a Netgear C7800 Router running firmware version 6.01.07 (and possibly others) authenticates users via basic authentication, with an HTTP header containing a base64 value of the plaintext username and password. Because the web server also does not utilize transport security by default, this renders the administrative credentials vulnerable to eavesdropping by an adversary during every authenticated request made by a client to the router over a WLAN, or a LAN, should the adversary be able to perform a man-in-the-middle attack.

Related Vulnerabilities

CVE-2020-6195

MEDIUM

CVSS:6.4(Medium)

SAP Business Objects Business Intelligence Platform (CMC), version 4.1, 4.2, shows cleartext password in the response, leading to Information Disclosure. It involves social engineering in order to gai...

CWE-3192020

CVE-2012-5562

MEDIUM

CVSS:6.5(Medium)

rhn-proxy: may transmit credentials over clear-text when accessing RHN Satellite

CWE-3192012

CVE-2017-17844

MEDIUM

CVSS:6.5(Medium)

An issue was discovered in Enigmail before 1.9.9. A remote attacker can obtain cleartext content by sending an encrypted data block (that the attacker cannot directly decrypt) to a victim, and relying...

CWE-3192017

CVE-2017-6665

MEDIUM

CVSS:6.5(Medium)

A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to reset the Autonomic Control Plane (ACP) of an a...

CWE-3192017

CVE-2018-11477

MEDIUM

CVSS:6.5(Medium)

An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle devices. The data packets that are sent between the iOS or Android application and the OBD dongle are not encrypted. The combination of this v...

CWE-3192018

CVE-2018-16225

MEDIUM

CVSS:6.5(Medium)

The QBee MultiSensor Camera through 4.16.4 accepts unencrypted network traffic from clients (such as the QBee Cam application through 1.0.5 for Android and the Swisscom Home application up to 10.7.2 f...

CWE-3192018