NETGEAR RAX30 代码问题漏洞

NETGEAR RAX30 is a dual-band wireless router from NETGEAR. A security vulnerability exists in the NETGEAR RAX30. An attacker can exploit the vulnerability by passing the "forceFWUpdate" parameter to force an upgrade and bypass certain authentication checks...

CVE-2023-28337

When uploading a firmware image to a Netgear Nighthawk Wifi6 Router RAX30, a hidden “forceFWUpdate” parameter may be provided to force the upgrade to complete and bypass certain validation checks. End users can use this to upload modified, unofficial, and potentially malicious firmware to the...

PT-2023-2335

Name of the Vulnerable Software and Affected Versions Netgear Nighthawk Wifi6 Router RAX30 affected versions not specified Description The issue is related to a lack of access control in the firmware image upload handler of the Netgear Nighthawk Wifi6 Router RAX30. A hidden forceFWUpdate paramete...

CVE-2023-28337: Unrestricted Upload of File with Dangerous Type

When uploading a firmware image to a Netgear Nighthawk Wifi6 Router RAX30, a hidden “forceFWUpdate” parameter may be provided to force the upgrade to complete and bypass certain validation checks. End users can use this to upload modified, unofficial, and potentially malicious firmware to the...