Description (CNA)
An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does not impact the availability of the router's core services like WiFi network.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| NETGEAR / RAX30 | affected 0 before V1.0.9.92 |
| NETGEAR / RAX35 | affected 0 before V1.0.10.72 |
| NETGEAR / RAX38 | affected 0 before V1.0.6.106 |
| NETGEAR / RAX40 | affected 0 before V1.0.6.106 |
| NETGEAR / RAXE300 | affected 0 before V1.0.9.82 |
CWE
CWE-121
References
- https://www.netgear.com/support/product/rax30
- https://www.netgear.com/support/product/rax35
- https://www.netgear.com/support/product/rax38
- https://www.netgear.com/support/product/rax40
- https://www.netgear.com/support/product/raxe300
- https://kb.netgear.com/000070912/September-2026-NETGEAR-Security-Advisory
ADP enrichment
No English description supplied.
No references supplied.