ZDI-CAN-19589: ZDI-24-583: (Pwn2Own) NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability
First published: Mon Jun 10 2024(Updated: )
This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloading of files via HTTPS. The issue results from the lack of proper validation of the certificate presented by the server. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NETGEAR RAX30 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of ZDI-CAN-19589?
The severity of ZDI-CAN-19589 is significant as it allows network-adjacent attackers to compromise the integrity of downloaded files without authentication.
How do I fix ZDI-CAN-19589?
To fix ZDI-CAN-19589, ensure that your NETGEAR RAX30 router firmware is updated to the latest version provided by NETGEAR.
Who is affected by ZDI-CAN-19589?
NETGEAR RAX30 router users are affected by ZDI-CAN-19589.
Can ZDI-CAN-19589 be exploited remotely?
ZDI-CAN-19589 can only be exploited locally by network-adjacent attackers.
What type of attacks can ZDI-CAN-19589 enable?
ZDI-CAN-19589 can enable attackers to manipulate the integrity of files downloaded from affected routers.
- collector/zdi-published
- source/ZDI
- alias/ZDI-CAN-19589
- agent/title
- agent/last-modified-date
- agent/type
- agent/first-publish-date
- agent/severity
- agent/references
- agent/softwarecombine
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/tags
- collector/zdi-advisory
- alias/ZDI-24-583
- alias/CVE-2023-51634
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/netgear
- canonical/netgear rax30