CVE-2023-27853

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could allow an attacker to execute arbitrary code on the device.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

Vendor	Product	Versions
n/a	NETGEAR Nighthawk WiFi6 Router	prior to V1.0.10.94

References

https://tenable.com/security/research/tra-2023-9Third Party Advisory
https://tenable.com/security/research/tra-2023-9Third Party Advisory

Timeline

Published: Mar 10, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-278547.8An arbitrary code execution vulnerability was reported to Rockwell Automation in Arena Simulation that could potentially allow a malicious u CVE-2023-278559.8In affected versions, a path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer. An unauthenticated CVE-2023-278567.5In affected versions, path traversal exists when processing a message of type 8 in Rockwell Automation's ThinManager ThinServer. An unau CVE-2023-278577.5In affected versions, a heap-based buffer over-read condition occurs when the message field indicates more data than is present in the messa CVE-2023-278587.8Rockwell Automation Arena Simulation contains an arbitrary code execution vulnerability that could potentially allow a malicious user to com CVE-2023-278596.5IBM Db2 10.1, 10.5, and 11.1 could allow a remote user to execute arbitrary code caused by installing like named jar files across multiple d CVE-2023-27864.3Mattermost fails to properly check the permissions when executing commands allowing a member with no permissions to post a message in a chan CVE-2023-278605.3IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 could disclose sensitive information in an error message. This information could be used in CVE-2023-278615.9IBM Maximo Application Suite - Manage Component 8.8.0 and 8.9.0 transmits sensitive information in cleartext that could be intercepted by an CVE-2023-278634.9IBM Spectrum Protect Plus Server 10.1.13, under specific configurations, could allow an elevated user to obtain SMB credentials that may be CVE-2023-278645.4IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which w CVE-2023-278669.8IBM Informix JDBC Driver 4.10 and 4.50 is susceptible to remote code execution attack via JNDI injection when driver code or the application