Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5p7c-48hh-g6m7

Опубликовано: 22 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the downloading of files via HTTPS. The issue results from the lack of proper validation of the certificate presented by the server. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-19589.

NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the downloading of files via HTTPS. The issue results from the lack of proper validation of the certificate presented by the server. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-19589.

EPSS

Процентиль: 69%
0.00611
Низкий

7.5 High

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 7.5
nvd
около 1 года назад

NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloading of files via HTTPS. The issue results from the lack of proper validation of the certificate presented by the server. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-19589.

CVSS3: 7.5
fstec
больше 1 года назад

Уязвимость микропрограммного обеспечения маршрутизаторов Nighthawk WiFi 6 Router (RAX30), связанная с недостатками процедуры аутентификации, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 69%
0.00611
Низкий

7.5 High

CVSS3

Дефекты

CWE-295