NETGEAR Nighthawk WiFi6 Router: Arbitrary File Read via Sharing (pre V1.0.10.94)
CVE-2023-27850 Published on March 10, 2023

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that allows users with access to this feature to access arbitrary files on the device.

NVD

Weakness Type

What is an insecure temporary file Vulnerability?

The software attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

CVE-2023-27850 has been classified to as an insecure temporary file vulnerability or weakness.


Products Associated with CVE-2023-27850

Want to know whenever a new CVE is published for Netgear Rax30 Firmware? stack.watch will email you.

 

Exploit Probability

EPSS
0.22%
Percentile
44.95%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.