GCVE - cpe:2.3:h:netgear:rax38:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:netgear:rax38:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Netgear (`99700297-c207-56f4-abd0-97ab0c8bf3ab`)
Product	Rax38 (`230dfecc-7e87-5059-88c3-c941bab38264`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-27358`	not_vulnerable	2026-06-08 05:57:40.973380	NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability HIGH (8.8) NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of specific SOAP requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the service account. Was ZDI-CAN-19754. Published: 2024-05-03T01:56:10.655Z Updated: 2024-08-02T12:09:43.431Z Open on db.gcve.eu Reference links https://www.zerodayinitiative.com/advisories/ZDI-23-502/ https://kb.netgear.com/000065617/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-PSV-2022-0349	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-45493`	not_vulnerable	2026-06-08 05:36:48.256739	Details available HIGH (7.6) Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RAX35 before 1.0.4.102, RAX38 before 1.0.4.102, and RAX40 before 1.0.4.102. Published: 2021-12-26T01:04:53.000Z Updated: 2024-08-04T04:39:21.278Z Open on db.gcve.eu Reference links https://kb.netgear.com/000064453/Security-Advisory-for-Admin-Credential-Disclosure-on-Some-Routers-PSV-2019-0293	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-41449`	not_vulnerable	2026-06-08 05:35:20.563706	Details available A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated attacker to gain access to sensitive restricted information, such as forbidden files of the web application, via sending a specially crafted HTTP packet. Published: 2021-12-09T13:05:13.000Z Updated: 2026-07-09T00:14:57.666Z Open on db.gcve.eu Reference links https://www.netgear.com/about/security/ https://kb.netgear.com/000064405/Security-Advisory-for-Path-Traversal-on-Some-Routers-PSV-2021-0268	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-38526`	not_vulnerable	2026-06-08 05:33:47.725711	Details available MEDIUM (4.3) Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX35 before 1.0.3.94, RAX38 before 1.0.3.94, and RAX40 before 1.0.3.94. Published: 2021-08-11T00:01:17.000Z Updated: 2024-08-04T01:44:23.517Z Open on db.gcve.eu Reference links https://kb.netgear.com/000063782/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2020-0416	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.