CVE-2023-28338 Denial of service in NETGEAR Nighthawk WiFi6 Router (RAX30)
An attacker can exhaust router resources by sending large multipart requests, causing a denial of service until reboot.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-28338?
CVE-2023-28338 is a high-severity denial of service vulnerability in NETGEAR Nighthawk WiFi6 Router (RAX30), published on 15 Mar 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Any request send to a Netgear Nighthawk Wifi6 Router (RAX30)'s web service containing a “Content-Type” of “multipartboundary=” will result in the request body being written to “/tmp/mulipartFile” on the device itself. A sufficiently large file will cause device resources to be exhausted, resulting in the device becoming unusable until it is rebooted.
Weakness: CWE-770
Which versions are affected by CVE-2023-28338?
It affects 1 product.
Products include Netgear Rax30 Firmware.
How do I fix CVE-2023-28338?
No fix has been published for CVE-2023-28338 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2023-28338 being exploited?
There is no known exploitation of CVE-2023-28338 in the wild and no public exploit code.
Other vulnerabilities in NETGEAR Nighthawk WiFi6 Router (RAX30)
- CVE-2025-44658 File upload in n/a
- CVE-2023-1327 Auth bypass in Netgear RAX30 (AX2400)
- CVE-2023-27852 Memory corruption in NETGEAR Nighthawk WiFi6 Router
- CVE-2023-27853 Other in NETGEAR Nighthawk WiFi6 Router
- CVE-2023-51635 NETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability
Sources
Also known as GHSA-7fqr-w76q-379j.