CVE-2023-27368

CVE-2023-27368 is a critical stack-based buffer overflow vulnerability in the soap_serverd binary of NETGEAR RAX30 routers, allowing unauthenticated, network-adjacent attackers to execute arbitrary code and bypass authentication. This flaw stems from improper validation of user-supplied data length when parsing SOAP message headers. With a CVSS score of 8.8 (High), it presents a significant risk due to its low attack complexity and high impact on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered community attention and media coverage, indicating its potential for future exploitation.