(
diff)
← Older revision | Approved revision (diff) | Latest revision (diff) | Newer revision → (diff)
| Netgear Nighthawk AX12 (RAX120) Router
|
|
Security Grade
Calculator v1
|
Netgear Nighthawk AX12 (RAX120) Router
Release Date: 2019-01-01 • Status: End of Service
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
🔗 Proof
|
Router has basic physical security. Exposed UART ports on PCB allow firmware extraction with specialized tools. No tamper detection feature.
|
| Known vulnerabilities
|
Very common
|
🔗 Proof
|
Multiple critical CVEs documented including post-authentication command injection (CVE-2026-62656), TLS certificate validation flaw allowing MITM attacks (CVE-2026-0420), and missing authentication for critical functions.
|
| Prior attacks
|
Rare
|
🔗 Proof
|
Netgear routers have been targeted by Mirai variants and other botnets, but the high-end Nighthawk line is less frequently compromised than low-cost models due to default password requirements.
|
| Updatability
|
None
|
🔗 Proof
|
Netgear has officially marked RAX120 as "End of Service" — no further firmware updates planned. All known vulnerabilities will remain unpatched on devices still in use.
|
| Category Score
|
Score: 3 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
🔗 Proof
|
Web management interface requires password authentication, but remote management (DRS) is often enabled by default and exposed to the internet without proper protection.
|
| Communications
|
Encrypted with obsolete encryption
|
🔗 Proof
|
HTTPS is supported but TLS certificate validation is flawed — CVE-2026-0420 allows man-in-the-middle attacks due to improper certificate checking in the ReadyCloud client.
|
| Storage
|
No encryption
|
🔗 Proof
|
Configuration files, admin passwords, and Wi-Fi keys stored in flash memory without encryption. Physical access allows full credential extraction via UART.
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Basic
|
🔗 Proof
|
Single admin account only. No role-based access control or multi-user support. Guest network isolation is available but limited.
|
| Authentication
|
Basic
|
🔗 Proof
|
Password-based web authentication only. No two-factor authentication support. Some firmware versions have hardcoded backdoor credentials in legacy code.
|
| Brute-force protection
|
Exist
|
🔗 Proof
|
Basic rate limiting exists for web login, but Telnet and SSH services have minimal protection. Many older firmware versions have no account lockout.
|
| Event logging
|
Partial logging
|
🔗 Proof
|
Basic system logs and security event logs are available, but do not record detailed admin action history or failed login attempts comprehensively.
|
| Passwords
|
Require change after setup
|
🔗 Proof
|
Users are forced to change default admin password during initial setup. Complexity requirements are moderate but not enforced strongly.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Netgear VOS / Linux-based firmware (Companion App: Nighthawk App)
|
| Hardware (CPU / GPU)
|
CPU: • GPU:
|
| Memory & Storage
|
Memory: • Storage:
|
| Power, Battery & Charging
|
Battery: • Power: • Charging:
|
| Display & Camera
|
Display: • Camera:
|
| Sound & Connectivity
|
Sound: • Connectivity: Wi-Fi 6 (802.11ax), Multi-Gig 5G/2.5G/1G Ethernet, USB 3.0
|
| Physical (Dimensions & Mass)
|
Dimensions: • Mass:
|
High-Performance Home / Gaming Router evaluated under the IDRS security assessment framework. The device has reached End of Service (EOS) status with no further security updates planned by the vendor. Multiple critical unpatched vulnerabilities affect the device, including command injection (CVE-2026-62656) and TLS MITM flaws (CVE-2026-0420). Storage of credentials in flash memory is unencrypted.
GRAS Total: 8
Final Grade: D (High Danger Level)
CVE-2026-62656 - Netgear Command Injection
CVE-2026-0420 - Netgear TLS MITM Vulnerability
Netgear RAX120 Official Support Page
Netgear Security Advisory
Mirai Botnet Target Analysis
Router Firmware Extraction Research
Forescout Riskiest Devices 2025
Router Backdoor Research
CNCERT Brute-force Report
Bitdefender 2025 IoT Security Report
