PT-2023-3271 · NetGear · Netgear Rax30

·

CVE-2023-34284

·

Publicado

2023-01-04

·

Atualizado

2025-01-03

CVSS v3.1

6.3

Média

VetorAV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions NETGEAR RAX30 (affected versions not specified)
Description This issue allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR RAX30 routers. The specific flaw exists within the system configuration, where a hardcoded user account can be used to access the CLI service as a low-privileged user. An attacker can leverage this vulnerability to bypass authentication on the system.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-03394
CVE-2023-34284
ZDI-23-838

Produtos afetados

Netgear Rax30