NETGEAR RAX30 Use of Hard-coded Credentials Authentication Bypass Vulnerability

CVE-2023-34284

Summary

The NETGEAR RAX30 router is susceptible to a significant authentication bypass due to the presence of hard-coded credentials. This vulnerability allows network-adjacent attackers to access the configuration interface without requiring authentication, leveraging the inadequately protected CLI service. The specific flaw exists within the system's configuration, which contains a hardcoded user account that offers low-privileged access. Attackers can exploit this weakness to gain unauthorized access, posing a risk to network integrity and user privacy. Detailed advisories and further information are available through vendor and security advisory resources.

References