Vulnerabilities

An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI.

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.

A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality…

An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation.

Improper certificate validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400 WiFi 6 Router) and RAXE300 (Nighthawk AXE7800 Tri-Band WiFi 6E Router) allows attackers with the ability to interce…

In Netgear RAX30 V1.0.10.94, a PHP-FPM misconfiguration vulnerability is caused by not following the specification to only limit FPM to .php extensions.

In Netgear RAX30 V1.0.10.94_3, the USERLIMIT_GLOBAL option is set to 0 in multiple bftpd-related configuration files.

NETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability.

NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability.

NETGEAR RAX30 DHCP Server Command Injection Remote Code Execution Vulnerability.

NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability.

NETGEAR RAX30 Telnet CLI passwd Stack-based Buffer Overflow Remote Code Execution Vulnerability.

NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability.

NETGEAR RAX30 cmsCli_authenticate Stack-based Buffer Overflow Remote Code Execution Vulnerability.

NETGEAR RAX30 Use of Hard-coded Credentials Authentication Bypass Vulnerability.

NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability.

NETGEAR RAX30 Device Configuration Cleartext Storage Information Disclosure Vulnerability.

NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability.

NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability.

NETGEAR RAX30 libcms_cli Command Injection Remote Code Execution Vulnerability.

NETGEAR RAX30 rex_cgi JSON Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.

NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability.

NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability.

NETGEAR RAX30 GetInfo Missing Authentication Information Disclosure Vulnerability.

NETGEAR RAX30 logCtrl Command Injection Remote Code Execution Vulnerability.