Netgear Routers’ Flaws Expose Users to Malware, Remote Attacks, and Surveillance

As many as five security flaws have been disclosed in Netgear RAX30 routers that could be chained to bypass authentication and achieve remote code execution.

“Thriving exploits could allow attackers to check users’ internet action, hijack internet connections, and redirect website traffic to malicious internet websites or inject malware into network website traffic,” Claroty security researcher Uri Katz explained in a report.

Additionally, a network-adjacent menace actor could also weaponize the flaws to access and command networked sensible gadgets like security cameras, thermostats, good locks tamper with router options, and even use a compromised network to launch attacks against other equipment or networks.

The listing of flaws, which were being demonstrated at the Pwn2Own hacking competition held at Toronto in December 2022, is as follows –

• CVE-2023-27357 (CVSS score: 6.5) – Missing Authentication Information Disclosure Vulnerability
• CVE-2023-27367 (CVSS rating: 8.) – Command Injection Remote Code Execution Vulnerability
• CVE-2023-27368 (CVSS rating: 8.8) – Stack-based mostly Buffer Overflow Authentication Bypass Vulnerability
• CVE-2023-27369 (CVSS score: 8.8) – Stack-centered Buffer Overflow Authentication Bypass Vulnerability
• CVE-2023-27370 (CVSS rating: 5.7) – Unit Configuration Cleartext Storage Details Disclosure Vulnerability

A evidence-of-strategy (PoC) exploit chain illustrated by the industrial cybersecurity firm exhibits that it is really doable to string the flaws — CVE-2023-27357, CVE-2023-27369, CVE-2023-27368, CVE-2023-27370, and CVE-2023-27367 (in that get) — to extract the product serial variety and finally receive root obtain to it.

Upcoming WEBINARLearn to Cease Ransomware with Real-Time Defense

Sign up for our webinar and master how to quit ransomware attacks in their tracks with real-time MFA and company account security.

Conserve My Seat!

“These five CVEs can be chained collectively to compromise impacted RAX30 routers, the most significant of which enable pre-authentication distant code execution on the unit,” Katz pointed out.

People of Netgear RAX30 routers are advised to update to firmware version 1..10.94 released by the networking business on April 7, 2023, to tackle the flaws and mitigate prospective pitfalls.

Located this article interesting? Follow us on Twitter  and LinkedIn to go through a lot more special content we put up.

Some components of this report are sourced from:
thehackernews.com