CVE-2023-1327

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2023-1327", "assignerOrgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be", "assignerShortName": "tenable", "dateUpdated": "2025-02-27T15:39:41.759Z", "dateReserved": "2023-03-10T00:00:00.000Z", "datePublished": "2023-03-14T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be", "shortName": "tenable", "dateUpdated": "2023-03-14T00:00:00.000Z"}, "descriptions": [{"lang": "en", "value": "Netgear RAX30 (AX2400), prior to version 1.0.6.74, was affected by an authentication bypass vulnerability, allowing an unauthenticated attacker to gain administrative access to the device's web management interface by resetting the admin password."}], "affected": [{"vendor": "n/a", "product": "Netgear RAX30 (AX2400)", "versions": [{"version": "All versions prior to version 1.0.6.74", "status": "affected"}]}], "references": [{"url": "https://drupal9.tenable.com/security/research/tra-2023-10"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "Authentication Bypass"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T05:40:59.920Z"}, "title": "CVE Program Container", "references": [{"url": "https://drupal9.tenable.com/security/research/tra-2023-10", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-02-27T15:38:50.788198Z", "id": "CVE-2023-1327", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-27T15:39:41.759Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2023-1327", "assignerOrgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be", "assignerShortName": "tenable", "dateUpdated": "2025-02-27T15:39:41.759Z", "dateReserved": "2023-03-10T00:00:00.000Z", "datePublished": "2023-03-14T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be", "shortName": "tenable", "dateUpdated": "2023-03-14T00:00:00.000Z"}, "descriptions": [{"lang": "en", "value": "Netgear RAX30 (AX2400), prior to version 1.0.6.74, was affected by an authentication bypass vulnerability, allowing an unauthenticated attacker to gain administrative access to the device's web management interface by resetting the admin password."}], "affected": [{"vendor": "n/a", "product": "Netgear RAX30 (AX2400)", "versions": [{"version": "All versions prior to version 1.0.6.74", "status": "affected"}]}], "references": [{"url": "https://drupal9.tenable.com/security/research/tra-2023-10"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "Authentication Bypass"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T05:40:59.920Z"}, "title": "CVE Program Container", "references": [{"url": "https://drupal9.tenable.com/security/research/tra-2023-10", "tags": ["x_transferred"]}]}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-1327", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-02-27T15:38:50.788198Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-27T15:39:32.410Z"}}]}}

{"affected": [{"affectedData": [{"product": "Netgear RAX30 (AX2400)", "vendor": "n/a", "versions": [{"status": "affected", "version": "All versions prior to version 1.0.6.74"}]}], "source": "vulnreport@tenable.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netgear:rax30_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5DA843E4-41CF-48B1-8AFD-4267BE3EEF40", "versionEndExcluding": "1.0.6.74", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rax30:-:*:*:*:*:*:*:*", "matchCriteriaId": "EBC92B49-60E0-4554-BE7F-D2B5D6EF6454", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Netgear RAX30 (AX2400), prior to version 1.0.6.74, was affected by an authentication bypass vulnerability, allowing an unauthenticated attacker to gain administrative access to the device's web management interface by resetting the admin password."}], "id": "CVE-2023-1327", "lastModified": "2026-06-17T05:27:39.660", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-1327", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-02-27T15:38:50.788198Z", "version": "2.0.3"}}]}, "published": "2023-03-14T22:15:10.367", "references": [{"source": "vulnreport@tenable.com", "tags": ["Permissions Required"], "url": "https://drupal9.tenable.com/security/research/tra-2023-10"}, {"source": "nvd@nist.gov", "tags": ["Third Party Advisory"], "url": "https://github.com/advisories/GHSA-pvxx-rv48-qw5m"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Permissions Required"], "url": "https://drupal9.tenable.com/security/research/tra-2023-10"}], "sourceIdentifier": "vulnreport@tenable.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}