CVE-2023-1327 Auth bypass in Netgear RAX30 (AX2400)
An unauthenticated attacker can reset the admin password to gain administrative access to the Netgear RAX30 router's web interface.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-1327?
CVE-2023-1327 is a critical authentication bypass vulnerability in Netgear RAX30 (AX2400), published on 14 Mar 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Netgear RAX30 (AX2400), prior to version 1.0.6.74, was affected by an authentication bypass vulnerability, allowing an unauthenticated attacker to gain administrative access to the device's web management interface by resetting the admin password.
Weakness: CWE-287
Which versions are affected by CVE-2023-1327?
It affects 1 product.
Products include Netgear Rax30 Firmware.
How do I fix CVE-2023-1327?
No fix has been published for CVE-2023-1327 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2023-1327 being exploited?
There is no known exploitation of CVE-2023-1327 in the wild and no public exploit code.
Other vulnerabilities in Netgear RAX30 (AX2400)
- CVE-2025-44658 File upload in n/a
- CVE-2023-27852 Memory corruption in NETGEAR Nighthawk WiFi6 Router
- CVE-2023-27853 Other in NETGEAR Nighthawk WiFi6 Router
- CVE-2023-51635 NETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-27358 NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability
Sources
Also known as GHSA-pvxx-rv48-qw5m.