Rax30 Firmware (Netgear) - vulnerabilities (CVEs)

36 CVEs, 0 in the last 30 days, 17 known versions, newest CVE from 2026-09-08. Vendor: Netgear.

CVEs of Rax30 Firmware

CVE-2026-9216 - CVSS 3.5 (low), 2026-09-08: An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi…
CVE-2026-11738 - CVSS 4.4 (medium), 2026-08-11: Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make…
CVE-2026-11814 - CVSS 6.8 (medium), 2026-08-11: A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network…
CVE-2026-9211 - CVSS 8.8 (high), 2026-06-09: An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation.
CVE-2025-12943 - CVSS 7.5 (high), 2025-11-11: Improper certificate validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400 WiFi 6 Router) and RAXE300 (Nighthawk AXE7800…
CVE-2025-44652 - CVSS 7.5 (high), 2025-07-21: In Netgear RAX30 V1.0.10.94_3, the USERLIMIT_GLOBAL option is set to 0 in multiple bftpd-related configuration files. This can cause DoS attacks when…
CVE-2025-44658 - CVSS 9.8 (critical), 2025-07-21: In Netgear RAX30 V1.0.10.94, a PHP-FPM misconfiguration vulnerability is caused by not following the specification to only limit FPM to .php extensions. An…
CVE-2023-51635 - CVSS 8.8 (high), 2024-11-22: NETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute…
CVE-2023-51634 - CVSS 7.5 (high), 2024-11-22: NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to compromise the…
CVE-2023-40478 - CVSS 8 (high), 2024-05-03: NETGEAR RAX30 Telnet CLI passwd Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to…
CVE-2023-40480 - CVSS 8.8 (high), 2024-05-03: NETGEAR RAX30 DHCP Server Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary…
CVE-2023-40479 - CVSS 8.8 (high), 2024-05-03: NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on…
CVE-2023-35722 - CVSS 8.8 (high), 2024-05-03: NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on…
CVE-2023-34285 - CVSS 8.8 (high), 2024-05-03: NETGEAR RAX30 cmsCli_authenticate Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to…
CVE-2023-34283 - CVSS 4.6 (medium), 2024-05-03: NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability. This vulnerability allows physically present attackers to disclose sensitive…
CVE-2023-34284 - CVSS 6.3 (medium), 2024-05-03: NETGEAR RAX30 Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication…
CVE-2023-27369 - CVSS 8.8 (high), 2024-05-03: NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute…
CVE-2023-27368 - CVSS 8.8 (high), 2024-05-03: NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute…
CVE-2023-27370 - CVSS 5.7 (medium), 2024-05-03: NETGEAR RAX30 Device Configuration Cleartext Storage Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose…
CVE-2023-27367 - CVSS 8 (high), 2024-05-03: NETGEAR RAX30 libcms_cli Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code…
CVE-2023-27361 - CVSS 8 (high), 2024-05-03: NETGEAR RAX30 rex_cgi JSON Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to…
CVE-2023-27360 - CVSS 8.8 (high), 2024-05-03: NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on…
CVE-2023-27358 - CVSS 8.8 (high), 2024-05-03: NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code…
CVE-2023-27356 - CVSS 8 (high), 2024-05-03: NETGEAR RAX30 logCtrl Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on…
CVE-2023-27357 - CVSS 6.5 (medium), 2024-05-03: NETGEAR RAX30 GetInfo Missing Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive…
CVE-2023-48725 - CVSS 8.8 (high), 2024-03-07: A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX30 1.0.11.96 and 1.0.7.78. A specially…
CVE-2023-28337 - CVSS 8.8 (high), 2023-03-15: When uploading a firmware image to a Netgear Nighthawk Wifi6 Router (RAX30), a hidden “forceFWUpdate” parameter may be provided to force the upgrade to…
CVE-2023-28338 - CVSS 7.5 (high), 2023-03-15: Any request send to a Netgear Nighthawk Wifi6 Router (RAX30)'s web service containing a “Content-Type” of “multipartboundary=” will result in the request body…
CVE-2023-1327 - CVSS 9.8 (critical), 2023-03-14: Netgear RAX30 (AX2400), prior to version 1.0.6.74, was affected by an authentication bypass vulnerability, allowing an unauthenticated attacker to gain…
CVE-2023-27852 - CVSS 9.8 (critical), 2023-03-10: NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a buffer overflow vulnerability in various CGI mechanisms that could allow an attacker to execute…
CVE-2023-27851 - CVSS 8.8 (high), 2023-03-10: NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that unintentionally allows users with upload permissions to execute…
CVE-2023-27853 - CVSS 9.8 (critical), 2023-03-10: NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could allow an attacker to execute arbitrary…
CVE-2023-1205 - CVSS 8.8 (high), 2023-03-10: NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 is vulnerable to cross-site request forgery attacks on all endpoints due to improperly implemented CSRF…
CVE-2023-27850 - CVSS 6.8 (medium), 2023-03-10: NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that allows users with access to this feature to access arbitrary files…
CVE-2022-47210 - CVSS 7.8 (high), 2022-12-16: The default console presented to users over telnet (when enabled) is restricted to a subset of commands. Commands issued at this console, however, appear to…
CVE-2022-47209 - CVSS 8.8 (high), 2022-12-16: A support user exists on the device and appears to be a backdoor for Technical Support staff. The default password for this account is “support” and cannot be…