CVE-2021-20175

CVE-2021-20175 describes a critical vulnerability in the Netgear Nighthawk R6700 router (firmware version 1.0.4.120), where its SOAP interface (port 5000) transmits all communication, including sensitive data like usernames and passwords, in cleartext over HTTP. This design flaw (CWE-319) allows for easy interception of credentials. With a CVSS score of 7.5 (High), this vulnerability is network-exploitable with low attack complexity, potentially leading to full compromise of confidentiality. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential for future exploitation.