ZDI-23-839: NETGEAR RAX30 cmsCli_authenticate Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-839?
The severity of ZDI-23-839 is critical due to its potential for arbitrary code execution without authentication.
How do I fix ZDI-23-839?
To fix ZDI-23-839, update the firmware of your NETGEAR RAX30 router to the latest version provided by NETGEAR.
Who is affected by ZDI-23-839?
ZDI-23-839 affects users of NETGEAR RAX30 routers that have not been updated to the latest firmware.
Can ZDI-23-839 be exploited remotely?
ZDI-23-839 requires network-adjacent access, meaning that an attacker needs to be on the same network to exploit it.
What types of attacks can leverage ZDI-23-839?
ZDI-23-839 can allow attackers to execute arbitrary code on the affected NETGEAR RAX30 routers, potentially compromising the device.