Description
An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which could allow an attacker to perform attacker-in-the-middle (MiTM) style attacks impacting the product's confidentiality. This vulnerability affects the listed NETGEAR models.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NETGEAR | RAX120v1 | < V1.2.9.52 | V1.2.9.52 |
| NETGEAR | RAX120v2 | < V1.2.9.52 | V1.2.9.52 |
| NETGEAR | RAX35 | < V1.0.6.106 | V1.0.6.106 |
| NETGEAR | RAX38 | < V1.0.6.106 | V1.0.6.106 |
| NETGEAR | RAX40 | < V1.0.6.106 | V1.0.6.106 |
References
- https://www.netgear.com/support/product/rax35/ product patch
- https://www.netgear.com/support/product/rax38/ product patch
- https://www.netgear.com/support/product/rax40/ product patch
- https://www.netgear.com/support/product/rax120v2/ product patch
- https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory vendor-advisory