NETGEAR RAX30 fing_dil Stack Buffer Overflow RCE
CVE-2023-51635 Published on November 22, 2024

NETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability
NETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within fing_dil service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-19843.

Vendor Advisory NVD

Weakness Type

What is a Stack Overflow Vulnerability?

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

CVE-2023-51635 has been classified to as a Stack Overflow vulnerability or weakness.


Products Associated with CVE-2023-51635

Want to know whenever a new CVE is published for Netgear Rax30 Firmware? stack.watch will email you.

Netgear Rax30 Firmware
 

Affected Versions

NETGEAR RAX30: netgear rax30_firmware:

Exploit Probability

EPSS
1.01%
Percentile
76.81%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.