ZDI-23-839: NETGEAR RAX30 cmsCli_authenticate Stack-based Buffer Overflow Remote Code Execution Vulnerability

Published Jun 8, 2023
·
Updated

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability.

Affected Software

1 affected component
Netgear RAX30

Event History

Jun 8, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Mar 24, 2025
Advisory Published
via ZDI·07:25 PM

Frequently Asked Questions

1

What is the severity of ZDI-23-839?

The severity of ZDI-23-839 is critical due to its potential for arbitrary code execution without authentication.

2

How do I fix ZDI-23-839?

To fix ZDI-23-839, update the firmware of your NETGEAR RAX30 router to the latest version provided by NETGEAR.

3

Who is affected by ZDI-23-839?

ZDI-23-839 affects users of NETGEAR RAX30 routers that have not been updated to the latest firmware.

4

Can ZDI-23-839 be exploited remotely?

ZDI-23-839 requires network-adjacent access, meaning that an attacker needs to be on the same network to exploit it.

5

What types of attacks can leverage ZDI-23-839?

ZDI-23-839 can allow attackers to execute arbitrary code on the affected NETGEAR RAX30 routers, potentially compromising the device.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203