Skip to content
OpenAdvisories
High · 7.2 CVE-2023-48725 EUVD-2023-52759GHSA-jf3p-h292-vfq5

A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX30 1.0.11.96 and 1.0.…

Published Mar 7, 2024 · Updated Nov 4, 2025 · Assigned by talos

Description

A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX30 1.0.11.96 and 1.0.7.78. A specially crafted HTTP request can lead to code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Netgear RAX30 1.0.11.96, 1.0.7.78 —

References