CVE-2023-48725: Buffer Overflow
A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX30 1.0.11.96 and 1.0.7.78. A specially crafted HTTP request can lead to code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-48725?
CVE-2023-48725 is classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2023-48725?
To fix CVE-2023-48725, update the Netgear RAX30 firmware to the latest version provided by the vendor.
What versions are affected by CVE-2023-48725?
CVE-2023-48725 affects Netgear RAX30 versions between 1.0.7.78 and 1.0.11.96.
Can CVE-2023-48725 be exploited remotely?
Yes, CVE-2023-48725 can be exploited remotely through a specially crafted authenticated HTTP request.
Is authentication required to exploit CVE-2023-48725?
Yes, an authenticated user must make the HTTP request to exploit CVE-2023-48725.