CVE-2023-48725

ALTO 8.8CVE-2023-48725 · Published 07/03/2024 · updated 17/06/2026

En resumen

CVE-2023-48725 es una vulnerabilidad ALTO (CVSS 8.8).
Probabilidad de explotación en los próximos 30 días (EPSS): 19.4%, mayor que el 97.4% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX30 1.0.11.96 and 1.0.7.78. A specially crafted HTTP request can lead to code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

References

kb.netgear.com/000066037/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-the-RAX30-PSV-2023-0160 · Vendor Advisory
talosintelligence.com/vulnerability_reports/TALOS-2023-1887 · Exploit
talosintelligence.com/vulnerability_reports/TALOS-2023-1887

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free