Raxe300 Firmware vulnerabilities

3 known vulnerabilities in Raxe300 Firmware from NETGEAR. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  RAX30: Improper Certificate Validation

  CVE-2025-12943Nov 11, 2025NETGEAR

  Improper certificate validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400 WiFi 6 Router) and RAXE300 (Nighthawk AXE7800 Tri-Band WiFi 6E Router) allows attackers with the ability to intercept and tamper traffic destined to the de

• 8.8 High severity

  RAX30: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-27358May 3, 2024NETGEAR

  NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vuln

• 8.0 High severity

  RAX30: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-27356May 3, 2024NETGEAREPSS 1.24%

  NETGEAR RAX30 logCtrl Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Although authentication is required to exploit this