logo

Pwn2Own Toronto 22: Exploit Netgear Nighthawk RAX30 Routers

ID: 74474a49-49ab-5632-a4f1-b9169da9e518

STIX ID: report--74474a49-49ab-5632-a4f1-b9169da9e518

Feed Name: Claroty Team82

Threat Score
80/100

Date Published: 2023-07-04

Date Updated: 2026-04-17

Author: Uri Katz

...
...

Team82 disclosed five vulnerabilities in NETGEAR Nighthawk RAX30 routers and produced a proof-of-concept exploit chain that leverages information disclosure, SSL read and sscanf stack overflows, and command injection to bypass authentication, reset admin credentials, enable telnet, and obtain pre-authentication remote code execution; NETGEAR has patched the issues and users are urged to update firmware.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.