CVE-2023-28337: Malicious File Upload

Published Mar 15, 2023

Updated

When uploading a firmware image to a Netgear Nighthawk Wifi6 Router (RAX30), a hidden “forceFWUpdate” parameter may be provided to force the upgrade to complete and bypass certain validation checks. End users can use this to upload modified, unofficial, and potentially malicious firmware to the device.

Affected Software

2 affected components

Netgear RAX30 firmware

Netgear RAX30

Event History

Mar 15, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2023-28337?

CVE-2023-28337 is a vulnerability that allows the upload of modified or potentially malicious firmware to a Netgear Nighthawk Wifi6 Router (RAX30) by bypassing certain validation checks.

How does CVE-2023-28337 affect Netgear RAX30 firmware?

CVE-2023-28337 affects Netgear RAX30 firmware by allowing the upload of unofficial firmware that could be modified or malicious.

What is the severity of CVE-2023-28337?

CVE-2023-28337 has a severity rating of 8.8 (High).

How can I fix CVE-2023-28337?

To fix CVE-2023-28337, Netgear should release a firmware update that addresses the vulnerability and prevents the bypassing of validation checks.

Where can I find more information about CVE-2023-28337?

More information about CVE-2023-28337 can be found at the following link: https://drupal9.tenable.com/security/research/tra-2023-12