NETGEAR RAX30 Firmware 1.0.12.100 Hotfix

CPE Details

NETGEAR RAX30 Firmware 1.0.12.100 Hotfix
netgear
rax30_firmware
1.0.12.100_hotfix
2025-01-09
14h39 +00:00
2025-01-09
14h39 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:o:netgear:rax30_firmware:1.0.12.100_hotfix:*:*:*:*:*:*:*

Informations

Vendor

netgear

Product

rax30_firmware

Version

1.0.12.100_hotfix

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-28337 2023-03-15 00h00 +00:00 When uploading a firmware image to a Netgear Nighthawk Wifi6 Router (RAX30), a hidden “forceFWUpdate” parameter may be provided to force the upgrade to complete and bypass certain validation checks. End users can use this to upload modified, unofficial, and potentially malicious firmware to the device.
8.8
High
CVE-2023-28338 2023-03-15 00h00 +00:00 Any request send to a Netgear Nighthawk Wifi6 Router (RAX30)'s web service containing a “Content-Type” of “multipartboundary=” will result in the request body being written to “/tmp/mulipartFile” on the device itself. A sufficiently large file will cause device resources to be exhausted, resulting in the device becoming unusable until it is rebooted.
7.5
High
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.