NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability

NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30. Authentication is not required to exploit this vulnerability. The specific flaw exists within the soap_serverd binary. When parsing the request headers, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-19840.

N/A

栈缓冲区溢出

NETGEAR RAX30 安全漏洞

NETGEAR RAX30是美国网件（NETGEAR）公司的一个双频无线路由器。 NETGEAR RAX30存在安全漏洞，该漏洞源于soap_serverd二进制文件中存在缓冲区溢出漏洞。

N/A

N/A