The vulnerability arises from an improper implementation of TLS certificate validation in NETGEAR's ReadyCloud client app, allowing an attacker to conduct man‑in‑the‑middle style attacks that compromise the confidentiality of data transmitted to the device. This is a certificate validation failure (CWE‑325).

Affected devices are NETGEAR routers models RAX120v1, RAX120v2, RAX35, RAX38, and RAX40. The firmware versions that contain the fix are V1.2.9.52 for the 120 series, and V1.0.6.106 for the 35, 38, and 40 series. Devices that remain on older firmware are still vulnerable.

The CVSS score is 4.6, indicating a moderate impact. The EPSS score is 0.00021 (< 1%), and the vulnerability is not listed in CISA KEV. Based on the description, it is inferred that an attacker would need the ability to intercept TLS traffic between the device and its intended server, which typically requires remote or local network presence to exploit the missing validation. The overall risk is moderate, with the primary threat being confidentiality loss through intercepted traffic.