CVE-2023-27360 - CVE House

Back to Database

Status published High CVE-2023-27360

NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability

7.5 CVSS

Vulnerability Description

NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the lighttpd HTTP server. The issue results from allowing execution of files from untrusted sources. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-19398.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-27360

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from NETGEAR

View All →

NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before...

Improper input validation in NETGEAR Nighthawk routers

Improper input validation in NETGEAR Nighthawk router R7000P

Improper input validation in NETGEAR DGN2200v4

Improper certificate validation in firmware update logic in NETGEAR RAX30 and RAXE300

Affected Vendor

NETGEAR

View all reports →

Affected Software

RAX30

Vulnerable Versions:

1.0.6.74_1

Timeline

Official Publish: May 3rd, 2024

Last Modified: August 2nd, 2024

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1557 Adversary-in-the-Middle

Credential Access

T1071 Application Layer Protocol

Command and Control

T1552 Unsecured Credentials

Credential Access

T1190 Exploit Public-Facing Application

T1041 Exfiltration Over C2 Channel