Lucene search

[email protected]CVE-2023-27852

HistoryMar 10, 2023 - 6:15 p.m.

CVE-2023-27852

2023-03-1018:15:17

CWE-120

[email protected]

web.nvd.nist.gov

cve-2023-27852

netgear

nighthawk

wifi6

router

buffer overflow

vulnerability

cgi

arbitrary code execution

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.6%

JSON

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a buffer overflow vulnerability in various CGI mechanisms that could allow an attacker to execute arbitrary code on the device.

Affected configurations

NVD

Node

netgearrax30_firmwareRange<1.0.10.94

AND

netgearrax30Match-

CPENameOperatorVersion
netgear:rax30_firmwarenetgear rax30 firmwarelt1.0.10.94

CPE	Name	Operator	Version
netgear:rax30_firmware	netgear rax30 firmware	lt	1.0.10.94

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "NETGEAR Nighthawk WiFi6 Router",
    "versions": [
      {
        "version": "prior to V1.0.10.94",
        "status": "affected"
      }
    ]
  }
]

References

tenable.com/security/research/tra-2023-9

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.6%

JSON

Related for CVE-2023-27852

prion1 nvd1 cvelist1