CVE-2023-27370

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-27370
NETGEAR RAX30 Device Configuration Cleartext Storage Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR RAX30 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of device configuration. The issue results from the storage of configuration secrets in plaintext. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19841.

5.7 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.1 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://kb.netgear.com/000065619/Security-Advisory-for-Multiple-Vulnerabilities-on-the-RAX30-PSV-2022-0348 Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-23-501/ Third Party Advisory
https://kb.netgear.com/000065619/Security-Advisory-for-Multiple-Vulnerabilities-on-the-RAX30-PSV-2022-0348 Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-23-501/ Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:netgear:rax30_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax30:-:*:*:*:*:*:*:*
History

03 Jan 2025, 17:01

Type Values Removed Values Added
CPE cpe:2.3:h:netgear:rax30:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax30_firmware:*:*:*:*:*:*:*:*
References () https://kb.netgear.com/000065619/Security-Advisory-for-Multiple-Vulnerabilities-on-the-RAX30-PSV-2022-0348 - () https://kb.netgear.com/000065619/Security-Advisory-for-Multiple-Vulnerabilities-on-the-RAX30-PSV-2022-0348 - Vendor Advisory
References () https://www.zerodayinitiative.com/advisories/ZDI-23-501/ - () https://www.zerodayinitiative.com/advisories/ZDI-23-501/ - Third Party Advisory
First Time Netgear rax30
Netgear
Netgear rax30 Firmware

21 Nov 2024, 07:52

Type Values Removed Values Added
References () https://kb.netgear.com/000065619/Security-Advisory-for-Multiple-Vulnerabilities-on-the-RAX30-PSV-2022-0348 - () https://kb.netgear.com/000065619/Security-Advisory-for-Multiple-Vulnerabilities-on-the-RAX30-PSV-2022-0348 -
References () https://www.zerodayinitiative.com/advisories/ZDI-23-501/ - () https://www.zerodayinitiative.com/advisories/ZDI-23-501/ -
Summary
  • (es) Vulnerabilidad de divulgación de información de almacenamiento de texto sin cifrar de configuración del dispositivo NETGEAR RAX30. Esta vulnerabilidad permite a atacantes adyacentes a la red revelar información confidencial sobre las instalaciones afectadas de los enrutadores NETGEAR RAX30. Aunque se requiere autenticación para aprovechar esta vulnerabilidad, se puede omitir el mecanismo de autenticación existente. La falla específica existe en el manejo de la configuración del dispositivo. El problema se debe al almacenamiento de secretos de configuración en texto sin formato. Un atacante puede aprovechar esta vulnerabilidad para revelar las credenciales almacenadas, lo que provocaría un mayor commit. Fue ZDI-CAN-19841.

03 May 2024, 02:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-03 02:15

Updated : 2025-01-03 17:01

NVD link : CVE-2023-27370

Mitre link : CVE-2023-27370

CVE.ORG link : CVE-2023-27370

JSON object : View

Products Affected

netgear

  • rax30
  • rax30_firmware
CWE
CWE-312

Cleartext Storage of Sensitive Information