HIGH✓ PATCH🇬🇧 English

CVE-2023-41183

CVSS 8.8v3.0pub. 2024-05-03upd. 2025-08-08

NETGEAR Orbi 760 SOAP API Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR Orbi 760 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the SOAP API. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-20524.

oryginał EN
CVSS Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Netgear Rbr760

    HW
    Netgear
    wszystkie wersje

  • Netgear Rbr760 Firmware

    OS
    Netgear
    < 6.3.8.5
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
Auth Bypass
CWE
Referencje

Powiązane podatności

CVE-2026-0411MEDIUM4.2ten sam produkt

An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user...

CVE-2020-26919CRITICAL9.8⚠ KEVten sam vendor

NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level.

CVE-2017-6862CRITICAL9.8⚠ KEVten sam vendor

NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0...

CVE-2016-1555CRITICAL9.8⚠ KEVten sam vendor

(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php ...

CVE-2017-6077CRITICAL9.8⚠ KEVten sam vendor

ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execu...