Lucene search
HistoryMar 10, 2023 - 6:15 p.m.
CVE-2023-27851
cve-2023-27851
arbitrary code execution
upload permissions
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.9 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
46.3%
NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that unintentionally allows users with upload permissions to execute arbitrary code on the device.
Affected configurations
Node
netgearrax30_firmwareRange<1.0.10.94
netgearrax30Match-
References
Related
cvelist
cvelist
CVE-2023-27851
2023-03-10 00:00:00
cve
cve
CVE-2023-27851
2023-03-10 18:15:17
prion
prion
Input validation
2023-03-10 18:15:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.9 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
46.3%
Related for NVD:CVE-2023-27851