Netgear RAX30 SOAP Request sql injection

Summaryinfo

A vulnerability described as critical has been identified in Netgear RAX30. Affected is an unknown function of the component SOAP Request Handler. The manipulation results in sql injection. This vulnerability is known as CVE-2023-27358. Access to the local network is required for this attack. No exploit is available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability, which was classified as critical, was found in Netgear RAX30 (Wireless LAN Software) (unknown version). Affected is an unknown code block of the component SOAP Request Handler. The manipulation with an unknown input leads to a sql injection vulnerability. CWE is classifying the issue as CWE-89. The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of specific SOAP requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the service account. Was ZDI-CAN-19754.

The weakness was published 05/02/2023. The advisory is shared for download at zerodayinitiative.com. This vulnerability is traded as CVE-2023-27358 since 02/28/2023. There are neither technical details nor an exploit publicly available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 01/09/2025). The MITRE ATT&CK project declares the attack technique as T1505.

Upgrading eliminates this vulnerability. The upgrade is hosted for download at kb.netgear.com.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Wireless LAN Software

Vendor

• Netgear

Name

• RAX30

License

• commercial

Website

• Vendor: https://www.netgear.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion