NETGEAR ReadyCloud Client App TLS Certificate Validation Vulnerability Allowing Man-in-the-Middle Attacks

A vulnerability in the NETGEAR ReadyCloud client application has been identified, stemming from improper implementation of TLS certificate validation. This flaw can enable attackers to conduct man-in-the-middle (MiTM) attacks, potentially compromising the confidentiality of the product. Affected NETGEAR models include the RAX120v2, RAX35, RAX38, and RAX40.

Impact

Exploitation of this vulnerability could lead to successful man-in-the-middle attacks, allowing interception and possibly alteration of communications, thereby compromising the confidentiality of the affected product.