CVE-2023-27852 is a critical buffer overflow vulnerability affecting NETGEAR Nighthawk WiFi6 Routers (specifically RAX30 models) running firmware prior to V1.0.10.94. This flaw, residing in various CGI mechanisms, allows an unauthenticated attacker to execute arbitrary code on the device remotely. With a CVSS score of 9.8, it poses a severe risk of complete compromise (confidentiality, integrity, and availability). Despite its critical nature, there is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.0.10.94CPE matchmatch criteria | cpe:2.3:o:netgear:rax30_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Netgear RAX30 Multiple Vulnerabilities
Mar 8, 2023Netgear RAX30 Multiple Vulnerabilities
Mar 8, 2023Netgear RAX30 Multiple Vulnerabilities
Mar 8, 2023Netgear RAX30 Multiple Vulnerabilities
Mar 8, 2023