You do not have permission to edit this page, for the following reasons:
== Assessment scope == Documentation-based historical assessment of original RAX43 hardware with firmware 1.0.3.96, the exact version examined in Tenable TRA-2021-55 (published 30 December 2021). Use the normal commissioned WiFi/router profile with the documented web administrator password set; HTTP management and the reported common UART login remain within scope. The original NETGEAR September 2020 single-model manual (202-12140-01, preserved by ManualOwl) supports the contemporaneous WPS-PIN protection, logs and local management features. The 2023 official family manual is supplementary. No optional WPA3-only hardening, HTTPS-only policy or paid Armor subscription is credited. No physical installation or test was performed by the author. == Method and evidence boundaries == This is a documentary case-study assessment of the exact hardware, firmware and explicitly stated configuration, reviewed on 24 October 2026. No physical installation, penetration test or traffic capture by the author is claimed. Historical flaws do not establish current unpatched exposure. The website supplies qualitative categories rather than statistical thresholds: repeated real maintenance supports Updatability 1; isolated/uncertain maintenance supports2; a documented no-update condition supports3. Vulnerability/attack frequency labels are reasoned judgments, and a laboratory demonstration is not an observed campaign. None for prior attacks means no exact-model field campaign established in the reviewed sources, not proof of lifetime absence. Communications follows the least-protected enabled path carrying control, credentials or application payloads; a DNS/discovery packet alone is not used to label an entire device unencrypted. Storage evaluates confidential device-resident flash contents, not merely cloud security or whether executable firmware is readable. For Passwords, the methodology discusses first-setup credentials and expressly allows unique initial passwords. Where mandatory first-use creation or explicitly configured unique credentials do not match a shared-default-change label literally, option2 is a disclosed functional mapping, not a claim of forced periodic rotation. Option1 additionally requires enforced complexity; option3 requires positive evidence of common, predictable or unprotected access. Dates preserve the identified manufacturer announcement/availability or clearly identified primary regional catalog basis. No arbitrary first-of-month date is inserted. The calculated IDRS device grade is not a manufacturer certification or a student assignment mark. Calculated IDRS: 2 + 3 + 3 = 8 (D). Date basis: Digitec Switzerland original catalogue explicitly lists Date de sortie26/11/2020 for RAX43-100EUS. This is a documented regional retailer-listed release date; no claim of a manufacturer announcement or worldwide first-sale day is made. Date source: https://www.digitec.ch/fr/s1/product/netgear-rax43-nighthawk-ax5-5-stream-ax4200-routeur-14378904 Product-specific boundaries: This assesses the exact historical firmware identified by original research; no claim is made that current firmware has the same flaws. The release date is the retailer's regional catalogue value for RAX43-100EUS, not a global first-sale assertion. Resident plaintext is supported by original research; no independent raw-chip test or assertion about every flash partition is made. The manufacturer-authored September 2020 manual is preserved on ManualOwl; the live official download is a January 2023 combined-model revision. WPS-PIN protection covers that interface only; comprehensive HTTP/UART rate limiting is not asserted. == Hardware and general-information supplement == Supplement reviewed on 25 October 2026. Manufacturer model specifications and explicitly identified historical manuals support the added fields. Hardware capabilities do not imply that optional services, accessories or every capacity variant are enabled in the assessed case. Unpublished or unverified parameters are identified rather than guessed. Current sale/support status is separate from the original historical firmware/configuration assessment; the twelve security selections and original evidence have not been changed. === Specification evidence === * Generation, Dimensions, Mass, CPU, GPU, Memory, Storage, Connectivity: [https://www.netgear.com/uk/media/rax43_tcm158-90927.pdf source 1]. * Status: [https://kb.netgear.com/000070859/July-2026-NETGEAR-Security-Advisory source 1]. * Operating system: [https://www.tenable.com/security/research/tra-2021-55 source 1]. * Companion App, Camera, Sound: [https://www.netgear.com/uk/media/rax43_tcm158-90927.pdf source 1]; [https://www.downloads.netgear.com/files/GDC/RAX43/RAX41_RAX42_RAX43_UM_EN.pdf source 2]. * Battery, Power, Charging, Display: [https://www.downloads.netgear.com/files/GDC/RAX43/RAX41_RAX42_RAX43_UM_EN.pdf source 1]. === Specification qualifications === * Specifications refer to original RAX43 hardware, not RAX43v2. * The 30 W figure is the external adapter output rating, not a measurement of router consumption. * Status End of life is a form-option mapping of NETGEAR End-of-Support (EoS) in the June/July 2026 advisories. No exact end-of-sale date is asserted. The security assessment remains the historical 1.0.3.96 case, not a current-firmware evaluation.
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
