CVE-2023-1327: Critical severity Netgear RAX30 firmware vulnerability
Netgear RAX30 (AX2400), prior to version 1.0.6.74, was affected by an authentication bypass vulnerability, allowing an unauthenticated attacker to gain administrative access to the device's web management interface by resetting the admin password.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-1327?
CVE-2023-1327 is an authentication bypass vulnerability affecting Netgear RAX30 (AX2400) prior to version 1.0.6.74.
How severe is CVE-2023-1327?
CVE-2023-1327 has a severity rating of 9.8 (Critical).
How does CVE-2023-1327 allow an attacker to gain administrative access?
CVE-2023-1327 allows an unauthenticated attacker to gain administrative access to the device's web management interface by resetting the admin password.
Which software versions are affected by CVE-2023-1327?
Netgear RAX30 (AX2400) firmware versions up to and excluding 1.0.6.74 are affected by CVE-2023-1327.
Is Netgear RAX30 (AX2400) itself vulnerable to CVE-2023-1327?
No, Netgear RAX30 (AX2400) itself is not vulnerable to CVE-2023-1327.
Where can I find more information about CVE-2023-1327?
You can find more information about CVE-2023-1327 at the following references: [Tenable Advisory](https://drupal9.tenable.com/security/research/tra-2023-10), [GitHub Advisory](https://github.com/advisories/GHSA-pvxx-rv48-qw5m)
What is the Common Weakness Enumeration (CWE) for CVE-2023-1327?
The CWE for CVE-2023-1327 is CWE-287 (Improper Authentication).