ZDI-24-583: (Pwn2Own) NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloading of files via HTTPS. The issue results from the lack of proper validation of the certificate presented by the server. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root.
Other sources
This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2023-51634.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-583?
The severity of ZDI-24-583 is rated as high due to its potential for exploitation by network-adjacent attackers.
How do I fix ZDI-24-583?
To fix ZDI-24-583, update your NETGEAR RAX30 router to the latest firmware version provided by NETGEAR.
Who is affected by ZDI-24-583?
Only installations of the NETGEAR RAX30 router are affected by ZDI-24-583.
What type of attacks can exploit ZDI-24-583?
ZDI-24-583 can be exploited by attackers to compromise the integrity of downloaded information.
Is authentication required to exploit ZDI-24-583?
No, authentication is not required to exploit ZDI-24-583.