PT-2022-6575 · NetGear · Netgear Rax30

Rocco Calvi + 2 · Published 2022-11-23 · Updated 2025-01-03 · CVE-2023-27361

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NETGEAR RAX30 (affected versions not specified)

Description The issue is related to the handling of JSON data and results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. This can allow a remote attacker to execute arbitrary code in the context of root. Authentication is required to exploit this vulnerability. The specific flaw exists within the rex cgi JSON parsing functionality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

BDU:2023-02575

CVE-2023-27361

ZDI-23-495

Affected Products

Netgear Rax30

References · 7

• https://osv.dev/vulnerability/CVE-2023-27361 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-27361 · Security Note
• https://bdu.fstec.ru/vul/2023-02575 · Security Note
• https://kb.netgear.com/000065625/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-the-RAX30-PSV-2022-0302 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-23-495 · Security Note
• https://t.me/cvenotify/106195 · Telegram Post
• https://zerodayinitiative.com/advisories/ZDI-CAN-19355 · Note