CVE-2023-1327

critical

Description

Netgear RAX30 (AX2400), prior to version 1.0.6.74, was affected by an authentication bypass vulnerability, allowing an unauthenticated attacker to gain administrative access to the device's web management interface by resetting the admin password.

References

https://github.com/advisories/GHSA-pvxx-rv48-qw5m

https://drupal9.tenable.com/security/research/tra-2023-10

Details

Source: Mitre, NVD

Published: 2023-03-14

Updated: 2023-03-21

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H