Netgear Rax40 vulnerabilities, page 2

27 vulnerabilities

Known vulnerabilities in Netgear Rax40, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2019-20641netgearrax40
EPSS score
0.83%
NETGEAR RAX40 devices before 1.0.3.64 are affected by lack of access control at the function level.9CVE-2019-20642netgearrax40
EPSS score
0.54%
NETGEAR RAX40 devices before 1.0.3.64 are affected by authentication bypass.4.8CVE-2019-20644netgearrax40
EPSS score
0.48%
NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS.7.7CVE-2019-20643netgearrax40
EPSS score
0.83%
NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of sensitive information.5.9CVE-2026-0420netgearrax120_firmware+5
EPSS score
0.14%
An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which could allow an attacker to perform attacker-in-the-middle (MiTM) style attacks impacting the product's confidentiality. This vulnerability affects the listed NETGEAR models.3.5CVE-2026-9216netgearrax30_firmware+4
EPSS score
0.36%
An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does not impact the availability of the router's core services like WiFi network.8.8CVE-2023-27358netgearrax30_firmware+4
EPSS score
0.88%
NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of specific SOAP requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the service account. Was ZDI-CAN-19754.