NETGEAR RAX30 DHCP Server Command Injection Remote Code Execution Vulnerability
CVE-2023-40480

8.8HIGH

Key Information:

Vendor

Netgear
Status
Rax30
Vendor
CVE Published:
3 May 2024

What is CVE-2023-40480?

The vulnerability identified in the NETGEAR RAX30 router's DHCP server allows remote code execution due to improper validation of user-supplied input. An attacker exploiting this flaw can execute arbitrary code with root privileges without requiring authentication, thereby compromising the network's integrity and security. The flaw is linked to how the DHCP server handles user input, underscoring the critical importance of validation processes in safeguarding against potential exploits. Details are available through security advisories from the Zero Day Initiative and NETGEAR.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

RAX30 1.0.6.74_1

References

https://www.zerodayinitiative.com/advisories/ZDI-23-1162/
x_research-advisory
https://kb.netgear.com/000065645/Security-Advisory-for-Mu...
vendor-advisory

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.