ID

VAR-202303-0823


CVE

CVE-2023-1205


TITLE

of netgear  RAX30  Cross-site request forgery vulnerability in firmware

Trust: 0.8

sources: JVNDB: JVNDB-2023-005146

DESCRIPTION

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 is vulnerable to cross-site request forgery attacks on all endpoints due to improperly implemented CSRF protections. (DoS) It may be in a state

Trust: 1.71

sources: NVD: CVE-2023-1205 // JVNDB: JVNDB-2023-005146 // VULMON: CVE-2023-1205

AFFECTED PRODUCTS

vendor:netgearmodel:rax30scope:ltversion:1.0.10.94

Trust: 1.0

vendor:ネットギアmodel:rax30scope:eqversion: -

Trust: 0.8

vendor:ネットギアmodel:rax30scope:eqversion:rax30 firmware 1.0.10.94

Trust: 0.8

vendor:ネットギアmodel:rax30scope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2023-005146 // NVD: CVE-2023-1205

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2023-1205
value: HIGH

Trust: 1.0

134c704f-9b21-4f2e-91b3-4a467353bcc0: CVE-2023-1205
value: HIGH

Trust: 1.0

NVD: CVE-2023-1205
value: HIGH

Trust: 0.8

CNNVD: CNNVD-202303-828
value: HIGH

Trust: 0.6

nvd@nist.gov: CVE-2023-1205
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 5.9
version: 3.1

Trust: 2.0

NVD: CVE-2023-1205
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2023-005146 // CNNVD: CNNVD-202303-828 // NVD: CVE-2023-1205 // NVD: CVE-2023-1205

PROBLEMTYPE DATA

problemtype:CWE-352

Trust: 1.0

problemtype:Cross-site request forgery (CWE-352) [NVD evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2023-005146 // NVD: CVE-2023-1205

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202303-828

TYPE

cross-site request forgery

Trust: 0.6

sources: CNNVD: CNNVD-202303-828

PATCH

title:NETGEAR Nighthawk Fixes for cross-site request forgery vulnerabilitiesurl:http://123.124.177.30/web/xxk/bdxqById.tag?id=229326

Trust: 0.6

sources: CNNVD: CNNVD-202303-828

EXTERNAL IDS

db:NVDid:CVE-2023-1205

Trust: 3.3

db:JVNDBid:JVNDB-2023-005146

Trust: 0.8

db:CNNVDid:CNNVD-202303-828

Trust: 0.6

db:VULMONid:CVE-2023-1205

Trust: 0.1

sources: VULMON: CVE-2023-1205 // JVNDB: JVNDB-2023-005146 // CNNVD: CNNVD-202303-828 // NVD: CVE-2023-1205

REFERENCES

url:https://tenable.com/security/research/tra-2023-9

Trust: 2.5

url:https://nvd.nist.gov/vuln/detail/cve-2023-1205

Trust: 0.8

url:https://cxsecurity.com/cveshow/cve-2023-1205/

Trust: 0.6

url:https://nvd.nist.gov

Trust: 0.1

sources: VULMON: CVE-2023-1205 // JVNDB: JVNDB-2023-005146 // CNNVD: CNNVD-202303-828 // NVD: CVE-2023-1205

SOURCES

db:VULMONid:CVE-2023-1205
db:JVNDBid:JVNDB-2023-005146
db:CNNVDid:CNNVD-202303-828
db:NVDid:CVE-2023-1205

LAST UPDATE DATE

2025-03-01T23:10:22.799000+00:00


SOURCES UPDATE DATE

db:VULMONid:CVE-2023-1205date:2023-03-10T00:00:00
db:JVNDBid:JVNDB-2023-005146date:2023-11-07T02:40:00
db:CNNVDid:CNNVD-202303-828date:2023-03-16T00:00:00
db:NVDid:CVE-2023-1205date:2025-02-28T17:15:13.583

SOURCES RELEASE DATE

db:VULMONid:CVE-2023-1205date:2023-03-10T00:00:00
db:JVNDBid:JVNDB-2023-005146date:2023-11-07T00:00:00
db:CNNVDid:CNNVD-202303-828date:2023-03-10T00:00:00
db:NVDid:CVE-2023-1205date:2023-03-10T18:15:16.623