The vulnerability of the soap_serverd binary in NETGEAR RAX30 microprogramming devices allows a hacker to bypass authentication procedures and execute arbitrary code.

The vulnerability of the binary file soapserverd in NETGEAR RAX30 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to bypass authentication procedures and execute arbitrary code...

Netgear Routers' Flaws Expose Users to Malware, Remote Attacks, and Surveillance

As many as five security flaws have been disclosed in Netgear RAX30 routers that could be chained to bypass authentication and achieve remote code execution. "Successful exploits could allow attackers to monitor users' internet activity, hijack internet connections, and redirect traffic to...

(Pwn2Own) NETGEAR RAX30 Device Configuration Cleartext Storage Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR RAX30 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the lighttpd HTTP server. The issue results from allowing...

(Pwn2Own) NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of specific SOAP requests. The issue results from the lack ...

NETGEAR RAX30 rex_cgi JSON Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of JSON data. The issue results from the lack of proper...

(Pwn2Own) NETGEAR RAX30 logCtrl Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the logCtrl...

(Pwn2Own) NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the soapserverd binary. When parsing SOAP message headers, the process...

(Pwn2Own) NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30. Authentication is not required to exploit this vulnerability. The specific flaw exists within the soapserverd binary. When parsing the request headers, the process does not...

(Pwn2Own) NETGEAR RAX30 libcms_cli Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the libcmscl...

The vulnerability of the CGI microprogramming interface of the Nighthawk WiFi 6 Router (RAX30) allows a hacker to execute arbitrary code.

The vulnerability of the CGI microprogramming interface of the Nighthawk WiFi 6 Router RAX30 lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the File Sharing component in the Nighthawk WiFi 6 Router (RAX30) microprogramming software allows a hacker to gain access to arbitrary files.

The vulnerability of the File Sharing component in the Nighthawk WiFi 6 Router RAX30 microprogramming software lies in insufficient access control. Exploiting this vulnerability can allow a remote attacker to gain access to arbitrary files...

The vulnerability of Nighthawk WiFi 6 Router’s microprogramming software, related to the manipulation of inter-site requests, allows a hacker to perform a CSRF attack.

The vulnerability of Nighthawk WiFi 6 Router RAX30’s microprogramming software is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a remote attacker to execute a CSRF attack...

The vulnerability of the file-sharing mechanism of Nighthawk WiFi 6 Router (RAX30) allows a hacker to execute arbitrary code.

The vulnerability of the file-sharing mechanism of Nighthawk WiFi 6 Router RAX30 is related to incorrect permission handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

NETGEAR RAX30 (AX2400) Authentication Bypass Vulnerability

The NETGEAR RAX30 AX2400 is a wireless router that supports WiFi 6 technology and offers wireless transfer speeds of up to 2.4Gbps, making it suitable for high-bandwidth-demanding scenarios such as 4K streaming and gaming. The NETGEAR RAX30 AX2400 suffers from an authentication bypass vulnerabili...

NETGEAR RAX30 Denial of Service Vulnerability

The NETGEAR RAX30 is a dual-band wireless router from NETGEAR. The NETGEAR RAX30 suffers from a denial of service vulnerability that stems from mishandling a large number of message requests, which can be exploited by an attacker to pass through a file large enough to cause the device to run out ...

CVE-2023-28338

CVE-2023-28338 affects Netgear Nighthawk WiFi 6 Router (RAX30). A request with a Content-Type header containing multipartboundary= can cause the body to be written to /tmp/mulipartFile, leading to resource exhaustion and making the device unusable until reboot. Descriptions in multiple sources co...

NETGEAR RAX30 代码问题漏洞

NETGEAR RAX30 is a dual-band wireless router from NETGEAR. A security vulnerability exists in the NETGEAR RAX30. An attacker can exploit the vulnerability by passing the "forceFWUpdate" parameter to force an upgrade and bypass certain authentication checks...

NETGEAR RAX30 安全漏洞

The NETGEAR RAX30 is a dual-band wireless router from NETGEAR. The NETGEAR RAX30 suffers from a denial of service vulnerability that stems from mishandling a large number of message requests, which can be exploited by an attacker to pass through a file large enough to cause the device to run out ...

CVE-2023-28337

The CVE concerns Netgear Nighthawk Wifi6 Router (RAX30). A hidden parameter named forceFWUpdate can be supplied during firmware image upload to force the upgrade to complete and bypass certain validation checks, enabling end users to upload modified or potentially malicious firmware. Reported imp...