Re: Insecure authentication procedure reported on nighthawk RAX75

Ubaje · ‎2020-10-30

I ran the Bitdefender Home Scanner on my Netgear RAX75 and it reported a vulnerability which it described as:

'Http uses an insecure authentication procedure.

Http accepts unencrypted (plain text) logins'.

I have verified that I am running the latest version of software for the router. I am a novice at this network security stuff. Do I have a problem? Is it something I can fix? Any help is appreciated.

rinthos · ‎2020-10-30

For this awkwardly its working as designed.
Since the http url is only accessible internally it is less of a risk. If netgear enabled https you would get a different error that the certificate is not valid.
Hopefully a "better" option will be available. But for now I believe this is why they are trying to shift to the nighthawk app, to hide this detail.

In either case nothing you can do about this one. But just know you would get a similar error with other brand routers. Doesn't make it right, but you are no less secure than anyone else at this point.