This vulnerability involves a missing cryptographic step in the TLS certificate validation process of NETGEAR's ReadyCloud client app used with the RAX120v1 model. Due to improper implementation, an attacker could potentially intercept and manipulate communications via MiTM attacks, impacting the confidentiality of data transmitted. The CVSS 4.6 score reflects a medium severity with network attack vector, high complexity, and partial impact on confidentiality. No vendor advisory or patch information is currently available to confirm remediation status.

An attacker exploiting this vulnerability could intercept and potentially read or alter confidential communications between the ReadyCloud client app and its servers. This compromises the confidentiality of data but does not affect integrity or availability according to the CVSS vector. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should be cautious when using the ReadyCloud client app on affected devices and consider network-level protections against MiTM attacks.