CVE-2023-1327

Netgear RAX30 (AX2400), prior to version 1.0.6.74, was affected by an authentication bypass vulnerability, allowing an unauthenticated attacker to gain…

published March 14, 2023

CVSS
—
EPSS
1%
Percentile
58.5
In the wild
Unconfirmed
What it is

⚠️ An authentication bypass vulnerability in Netgear RAX30 could give an attacker the keys to your network castle! All they need is to reset the admin password. 🔑 Think of this vulnerability like a hotel where anyone can walk in and announce they've lost their room key — no verification needed! Suddenly, they're in your suite, snooping around your belongings without any checks in place. This could lead to unauthorized access to your device's web management interface, allowing attackers to modify settings or even open the floodgates to your home network. Imagine someone tampering with your Wi-Fi settings or rerouting your internet traffic – absolutely devastating!

Put simply

Think of this vulnerability like a hotel where anyone can walk in and announce they've lost their room key — no verification needed! Suddenly, they're in your suite, snooping around your belongings without any checks in place. The vulnerability allows unauthenticated users to gain admin access simply by resetting the admin password, bypassing any prior authentication mechanisms.

What to do

This could lead to unauthorized access to your device's web management interface, allowing attackers to modify settings or even open the floodgates to your home network. Imagine someone tampering with your Wi-Fi settings or rerouting your internet traffic – absolutely devastating! Update your Netgear RAX30 to version 1.0.6.74 or later immediately to close this security gap. Also, consider changing your passwords and enabling additional security features offered by the router to strengthen your defenses. You've got this! Staying proactive about updates will keep your network safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00874 · 58.5th percentile
Published
2023-03-14T00:00Z
EPSS history
Timeline
  • 14 MAR 00:00Z
    Netgear RAX30 (AX2400), prior to version 1.0.6.74, was affected by an authentication bypass vulnerability, allowing an unauthenticated attacker to gain…
    cvelistv5