CVE-2023-28338 — n/a / NETGEAR Nighthawk WiFi6 Router (RAX30)

Description (CNA)

Any request send to a Netgear Nighthawk Wifi6 Router (RAX30)'s web service containing a “Content-Type” of “multipartboundary=” will result in the request body being written to “/tmp/mulipartFile” on the device itself. A sufficiently large file will cause device resources to be exhausted, resulting in the device becoming unusable until it is rebooted.

Affected (CNA)

Vendor / product	Versions
n/a / NETGEAR Nighthawk WiFi6 Router (RAX30)	affected All known versions

CWE

No CWE identifiers supplied.

References

https://drupal9.tenable.com/security/research/tra-2023-12

ADP enrichment

CVE

No English description supplied.

https://drupal9.tenable.com/security/research/tra-2023-12

CISA-ADP

No English description supplied.

No references supplied.