CVE-2023-23110

An exploitable firmware modification vulnerability was discovered in certain Netgear products. The data integrity of the uploaded firmware image is ensured with a fixed checksum number. Therefore, an attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the checksum verification. This affects WNR612v2 Wireless Routers 1.0.0.3 and earlier, DGN1000v3 Modem Router 1.0.0.22 and earlier, D6100 WiFi DSL Modem Routers 1.0.0.63 and earlier, WNR1000v2 Wireless Routers 1.1.2.60 and earlier, XAVN2001v2 Wireless-N Extenders 0.4.0.7 and earlier, WNR2200 Wireless Routers 1.0.1.102 and earlier, WNR2500 Wireless Routers 1.0.0.34 and earlier, R8900 Smart WiFi Routers 1.0.3.6 and earlier, and R9000 Smart WiFi Routers 1.0.3.6 and earlier.

• CWE-494
• CWE-494

• https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BkBPIeGcoExploit, Third Party Advisory
• https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/H1lIcXbcoExploit, Third Party Advisory
• https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/HyZRxmb9sExploit, Third Party Advisory
• https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1BNhbWqiExploit, Third Party Advisory
• https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1qWglM5oExploit, Third Party Advisory
• https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1t47EbqjExploit, Third Party Advisory
• https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/SJCGkb-9oExploit, Third Party Advisory
• https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/r1Z4BX-5iExploit, Third Party Advisory
• https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/ryjVZz-5sExploit, Third Party Advisory
• https://www.netgear.com/about/security/Vendor Advisory
• https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BkBPIeGcoExploit, Third Party Advisory
• https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/H1lIcXbcoExploit, Third Party Advisory
• https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/HyZRxmb9sExploit, Third Party Advisory
• https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1BNhbWqiExploit, Third Party Advisory
• https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1qWglM5oExploit, Third Party Advisory
• https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1t47EbqjExploit, Third Party Advisory
• https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/SJCGkb-9oExploit, Third Party Advisory
• https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/r1Z4BX-5iExploit, Third Party Advisory
• https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/ryjVZz-5sExploit, Third Party Advisory
• https://www.netgear.com/about/security/Vendor Advisory

Published

Feb 2, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-23088Buffer OverFlow Vulnerability in Barenboim json-parser maste…9.8
• CVE-2023-2309The wpForo Forum WordPress plugin before 2.1.9 does not esca…6.1
• CVE-2023-2310A Channel Accessible by Non-Endpoint vulnerability in the Sc…5.3
• CVE-2023-23108In crasm 1.8-3, invalid input validation, specific files pas…7.5
• CVE-2023-23109In crasm 1.8-3, invalid input validation, specific files pas…7.5
• CVE-2023-2311Insufficient policy enforcement in File System API in Google…6.5
• CVE-2023-23119The use of the cyclic redundancy check (CRC) algorithm for i…5.9
• CVE-2023-2312Use after free in Offline in Google Chrome on Android prior …8.8
• CVE-2023-23120The use of the cyclic redundancy check (CRC) algorithm for i…5.9
• CVE-2023-23126Connectwise Automate 2022.11 is vulnerable to Clickjacking. …6.1
• CVE-2023-23127In Connectwise Control 22.8.10013.8329, the login page does …5.3
• CVE-2023-23128Connectwise Control 22.8.10013.8329 is vulnerable to Cross O…6.1