CVE-2023-1327

2023-03-1400:00:00

tenable

www.cve.org

netgear rax30

ax2400

authentication bypass

vulnerability

administrative access

web management interface

password reset

AI Score

Confidence

High

EPSS

0.002

Percentile

57.7%

JSON

Netgear RAX30 (AX2400), prior to version 1.0.6.74, was affected by an authentication bypass vulnerability, allowing an unauthenticated attacker to gain administrative access to the device’s web management interface by resetting the admin password.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Netgear RAX30 (AX2400)",
    "versions": [
      {
        "version": "All versions prior to version 1.0.6.74",
        "status": "affected"
      }
    ]
  }
]

References

drupal9.tenable.com/security/research/tra-2023-10