CVE-2023-51635

NETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within fing_dil service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-19843.

• CWE-121
• CWE-787

• https://kb.netgear.com/000065928/Security-Advisory-for-Multiple-Vulnerabilities-on-the-RAX30-PSV-2023-0139Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-24-584/Third Party Advisory

Published

Nov 22, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-51629D-Link DCS-8300LHV2 ONVIF Hardcoded PIN Authentication Bypas…8.8
• CVE-2023-5163The Weather Atlas Widget plugin for WordPress is vulnerable …5.4
• CVE-2023-51630Paessler PRTG Network Monitor Cross-Site Scripting Authentic…6.1
• CVE-2023-51631D-Link DIR-X3260 prog.cgi SetUsersSettings Stack-based Buffe…6.8
• CVE-2023-51633Centreon sysName Cross-Site Scripting Remote Code Execution …9.6
• CVE-2023-51634NETGEAR RAX30 Improper Certificate Validation Remote Code Ex…7.5
• CVE-2023-51636Avira Prime Link Following Local Privilege Escalation Vulner…7.8
• CVE-2023-51637Sante PACS Server PG Patient Query SQL Injection Remote Code…9.8
• CVE-2023-51638Allegra Hard-coded Credentials Authentication Bypass Vulnera…9.8
• CVE-2023-51639Allegra downloadExportedChart Directory Traversal Authentica…9.8
• CVE-2023-5164The Bellows Accordion Menu plugin for WordPress is vulnerabl…5.4
• CVE-2023-51640Allegra extarctZippedFile Directory Traversal Remote Code Ex…4.7