RF
Product
Rax30 Firmware
36
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 23Medium 8Low 1
Watch
Add Rax30 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-9211 | 8.8 | Jun 9 | Certain NETGEAR routers allow unauthenticated users to gain control of the router Affected: before 1.0.10.94 |
| CVE-2023-51635 | 8.8 | Nov 22 | NETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1.0.12.100_hotfix |
| CVE-2023-40480 | 8.8 | May 3 | NETGEAR RAX30 DHCP Server Command Injection Remote Code Execution Vulnerability Affected: before 1.0.9.92 |
| CVE-2023-40479 | 8.8 | May 3 | NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability Affected: before 1.0.9.92 |
| CVE-2023-35722 | 8.8 | May 3 | NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability Affected: before 1.0.11.96_2_hotfix |
| CVE-2023-34285 | 8.8 | May 3 | NETGEAR RAX30 cmsCli_authenticate Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1.0.11.96_2_hotfix |
| CVE-2023-27369 | 8.8 | May 3 | NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability Affected: before 1.0.10.94 |
| CVE-2023-27368 | 8.8 | May 3 | NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability Affected: before 1.0.10.94 |
| CVE-2023-27360 | 8.8 | May 3 | NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability Affected: before 1.0.10.94 |
| CVE-2023-27358 | 8.8 | May 3 | NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability Affected: before 1.0.10.94 |
| CVE-2023-48725 | 8.8 | Mar 7 | A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX30 1.0.11.96 and 1.0.7.78 Affected: 1.0.7.78; 1.0.11.96 |
| CVE-2023-28337 | 8.8 | Mar 15 | When uploading a firmware image to a Netgear Nighthawk Wifi6 Router (RAX30), a hidden “forceFWUpdate” parameter may be provided to force the upgrade to complete and bypass certain… Affected: All versions, or not specified |
| CVE-2023-27851 | 8.8 | Mar 10 | NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that unintentionally allows users with upload permissions to execute arbitrary code on the… Affected: before 1.0.10.94 |
| CVE-2023-1205 | 8.8 | Mar 10 | NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 is vulnerable to cross-site request forgery attacks on all endpoints due to improperly implemented CSRF protections Affected: before 1.0.10.94 |
| CVE-2022-47209 | 8.8 | Dec 16 | A support user exists on the device and appears to be a backdoor for Technical Support staff Affected: before 1.0.9.90 |
| CVE-2023-27367 | 8.0 | May 3 | NETGEAR RAX30 libcms_cli Command Injection Remote Code Execution Vulnerability Affected: before 1.0.10.94 |
| CVE-2023-27361 | 8.0 | May 3 | NETGEAR RAX30 rex_cgi JSON Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1.0.9.92 |
| CVE-2023-27356 | 8.0 | May 3 | NETGEAR RAX30 logCtrl Command Injection Remote Code Execution Vulnerability Affected: before 1.0.10.94 |
| CVE-2022-47210 | 7.8 | Dec 16 | The default console presented to users over telnet (when enabled) is restricted to a subset of commands Affected: before 1.0.9.90 |
| CVE-2025-12943 | 7.5 | Nov 11 | Improper certificate validation in firmware update logic in NETGEAR RAX30 and RAXE300 Affected: before 1.0.14.108 |
| CVE-2025-44652 | 7.5 | Jul 21 | In Netgear RAX30 V1.0.10.94_3, the USERLIMIT_GLOBAL option is set to 0 in multiple bftpd-related configuration files Affected: 1.0.10.94_3 |
| CVE-2023-51634 | 7.5 | Nov 22 | NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability Affected: before 1.0.12.100_hotfix |
| CVE-2023-28338 | 7.5 | Mar 15 | Any request send to a Netgear Nighthawk Wifi6 Router (RAX30)'s web service containing a “Content-Type” of “multipartboundary=” will result in the request body being written to… Affected: All versions, or not specified |
Showing 23