ZDI-CAN-19589: ZDI-24-583: (Pwn2Own) NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloading of files via HTTPS. The issue results from the lack of proper validation of the certificate presented by the server. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root.
Other sources
This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2023-51634.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-19589?
The severity of ZDI-CAN-19589 is significant as it allows network-adjacent attackers to compromise the integrity of downloaded files without authentication.
How do I fix ZDI-CAN-19589?
To fix ZDI-CAN-19589, ensure that your NETGEAR RAX30 router firmware is updated to the latest version provided by NETGEAR.
Who is affected by ZDI-CAN-19589?
NETGEAR RAX30 router users are affected by ZDI-CAN-19589.
Can ZDI-CAN-19589 be exploited remotely?
ZDI-CAN-19589 can only be exploited locally by network-adjacent attackers.
What type of attacks can ZDI-CAN-19589 enable?
ZDI-CAN-19589 can enable attackers to manipulate the integrity of files downloaded from affected routers.