CVE-2022-41545 affects Netgear C7800 routers running firmware version 6.01.07, where the administrative web interface uses insecure basic authentication over unencrypted HTTP. This vulnerability allows an attacker on the local network (WLAN or LAN via MiTM) to eavesdrop on administrative credentials due to the plaintext transmission of base64-encoded username and password. Rated as MEDIUM severity (CVSS 6.4), it has a high impact on confidentiality, integrity, and availability, but requires high privileges and attack complexity. There is currently no public exploit code available, no evidence of active exploitation, and minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
6.01.07CPE matchmatch criteria | cpe:2.3:o:netgear:c7800_firmware:6.01.07:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.0 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.