NETGEAR RAX30 DHCP Server Command Injection Remote Code Execution Vulnerability

CVE-2023-40480

Summary

The vulnerability identified in the NETGEAR RAX30 router's DHCP server allows remote code execution due to improper validation of user-supplied input. An attacker exploiting this flaw can execute arbitrary code with root privileges without requiring authentication, thereby compromising the network's integrity and security. The flaw is linked to how the DHCP server handles user input, underscoring the critical importance of validation processes in safeguarding against potential exploits. Details are available through security advisories from the Zero Day Initiative and NETGEAR.

References