CVE-2023-48725

No fix known EPSS 19%CVSS 7.2

A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX30 1.0.11.96 and 1.0.7.78. A specially crafted HTTP request can lead to code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Published 2024-03-07 · CVE record · OSV

Products: NETGEAR RAX30, netgear rax30_firmware