What’s Vulnerable › Vulnerabilities

CVE-2023-27370: NETGEAR RAX30 Device Configuration Cleartext Storage Information Disclosure Vulnerability

• Severity: medium (CVSS 5.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-03 · updated 2026-06-17
• Weakness: CWE-312

Description

NETGEAR RAX30 Device Configuration Cleartext Storage Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR RAX30 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of device configuration. The issue results from the storage of configuration secrets in plaintext. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19841.

Affected products

• NETGEAR RAX30: before 1.0.10.94 — fixed in 1.0.10.94

How to fix

Upgrade to a fixed version: NETGEAR RAX30 1.0.10.94. Check the vendor advisory for mitigations.

References

• https://kb.netgear.com/000065619/Security-Advisory-for-Multiple-Vulnerabilities-on-the-RAX30-PSV-2022-0348
• https://www.zerodayinitiative.com/advisories/ZDI-23-501/
• https://kb.netgear.com/000065619/Security-Advisory-for-Multiple-Vulnerabilities-on-the-RAX30-PSV-2022-0348
• https://www.zerodayinitiative.com/advisories/ZDI-23-501/

Get alerted when CVE-2023-27370 or the next vulnerability affects your stack