NETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-51635

Summary

The vulnerability identified within the NETGEAR RAX30 router involves a stack-based buffer overflow in the fing_dil service. This flaw occurs due to improper validation of the length of user-supplied data before it is copied into a fixed-length buffer on the stack. As a result, an attacker who is network-adjacent can exploit this weakness to execute arbitrary code with root privileges on the affected device without requiring authentication.

References