Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Claroty Team82 disclosed a five-vulnerability chain affecting NETGEAR’s Nighthawk RAX30 router. It could lead to remote code execution before an attacker authenticated to the router, but it was not an Internet-wide attack: NETGEAR said an attacker needed the Wi-Fi password or an Ethernet connection to the local network. RAX30 firmware 1.0.10.94 fixed the disclosed flaws; owners should check their installed version and the router’s current support status.

What was disclosed about the RAX30?

On May 11, 2023, SecurityWeek reported that Claroty Team82 had disclosed five vulnerabilities in the NETGEAR Nighthawk RAX30 Wi-Fi 6 router: CVE-2023-27357, CVE-2023-27367, CVE-2023-27368, CVE-2023-27369, and CVE-2023-27370. NETGEAR rated the issue High, with a CVSS 8.4 score in its 2023 advisory.

Claroty developed and demonstrated the chain at Pwn2Own Toronto 2022. SecurityWeek reported that the router exploit earned a $2,500 award at the competition. This documents a research demonstration and disclosure; the cited reporting and advisories do not establish that criminals exploited the flaws in the wild.

How could the exploit chain work?

The five bugs could be combined to move from information gathering to control of the router. Claroty described information disclosure, SOAP-service buffer overflows, authentication bypass, password-reset logic, Telnet enablement, and command injection among the issues involved. In broad defensive terms, an information leak exposed device details; SOAP flaws helped bypass authentication; configuration data enabled password-reset logic; and a command-injection path completed code execution. The chain also bypassed stack-canary protections on affected firmware.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Sale
NETGEAR Nighthawk WiFi 6 Router (RAX30) 5-Stream Dual-Band Gigabit Router, AX2400 Wireless Speed (Up to 2.4 Gbps), Coverage Up to 2,000 sq.ft. and 20 Devices (Renewed)
  • Coverage up to 2,000 sq. ft. and 20 devices
  • Fast AX2400 Gigabit speed with WiFi 6 technology for uninterrupted streaming, HD video gaming and web conferencing
  • NETGEAR routers come with security measures built in, including automatic firmware updates. Our Advanced Router Protection enables enhanced safety features and updates designed to help protect you and your family
  • Connects to your existing cable modem and replaces your WiFi router. Compatible with any internet service provider up to 1Gbps including cable, satellite, fiber, and DSL
  • Plug in computers, game consoles, streaming players, and more with 4 x 1G Ethernet ports

“Pre-authentication” describes the lack of a router-account login during the exploit chain; it does not mean the attacker could reach the router from anywhere. NETGEAR stated that exploitation required the attacker to have the Wi-Fi password or an Ethernet connection to the network.

What could an attacker do after exploiting the router?

Claroty reported that successful exploitation could let an attacker monitor Internet activity, hijack or redirect connections, and inject malware into network traffic. An attacker could also change router credentials or DNS settings, control connected smart-home devices such as cameras, thermostats, and smart locks, or use the router as a foothold to attack devices and networks behind it.

Rank #2
Sale
NETGEAR Nighthawk WiFi 6 Router (RAX30) - Security Features, 5-Stream Dual-Band Gigabit Router, AX2400 Wireless Speed (Up to 2.4 Gbps), Covers Up to 2,000 sq.ft. and 20 Devices
  • Coverage up to 2,000 sq. ft. and 20 devices
  • Fast AX2400 Gigabit speed with WiFi 6 technology for uninterrupted streaming, HD video gaming and web conferencing
  • NETGEAR routers come with security measures built in, including automatic firmware updates. Our Advanced Router Protection enables enhanced safety features and updates designed to help protect you and your family
  • Connects to your existing cable modem (seperate unit) and replaces your WiFi router. Compatible with any internet service provider up to 1Gbps including cable, satellite, fiber, and DSL
  • Plug in computers, game consoles, streaming players, and more with 4 x 1G Ethernet ports

That makes the router’s local-network position significant: a compromised gateway can affect traffic and devices beyond the router itself. The specific impact would depend on what devices and services were connected and how the network was configured.

Does this vulnerability work over the Internet or only on Wi-Fi?

The vendor’s stated access requirement was local: an attacker needed the Wi-Fi password or Ethernet access to the network. The disclosure should not be described as an unauthenticated attack that anyone could launch across the Internet. It could be carried out without first logging in to the router’s administrative account, but the attacker still needed a way onto the local network.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
NETGEAR Nighthawk WiFi 6 Router (RAX36) – Router Only, AX3000 3 Gbps Wireless Speed – Dual-Band Gigabit Internet – Covers 2,000 sq. ft., 25 Devices – Built-in VPN, USB 3.0, Gaming
  • Coverage up to 2,000 sq. ft. for up to 25 devices
  • Ultrafast AX3000 speeds up to 3Gbps with WiFi 6 technology for uninterrupted streaming, HD video gaming, and web conferencing
  • This router does not include a built-in cable modem. A separate cable modem (with coax inputs) is required for internet service.
  • Connects to your existing cable modem and replaces your WiFi router. Compatible with any internet service provider up to 1Gbps including cable, satellite, fiber, and DSL
  • Plug in computers, game consoles, streaming players, and more with 4 x 1G Ethernet ports

Which firmware fixes the RAX30 flaws?

NETGEAR’s 2023 advisory lists RAX30 firmware version 1.0.10.94 as fixing the disclosed vulnerabilities. SecurityWeek reported that the patch was released in early April 2023. NETGEAR advised owners to download the latest firmware, so 1.0.10.94 is the documented minimum fix for this disclosure—not necessarily the newest version available now.

  1. Identify the exact router model from its product label or administration interface, and check the installed firmware version in the router’s administration interface.
  2. Find the RAX30’s official NETGEAR support page and check the currently available firmware and any installation instructions for that exact model.
  3. Install the vendor’s current firmware, following its instructions, and verify afterward that the router reports the updated version.
  4. Check whether the model remains supported. NETGEAR’s June 2026 security advisory says models marked end-of-support (EoS) have no planned security updates and recommends retiring or replacing them.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Should you replace an older NETGEAR router?

Make the decision based on support, not just the age of the device or whether it received the 2023 RAX30 patch. A supported router with current firmware can receive future security fixes; an EoS router has no planned updates from NETGEAR. Before replacing one, confirm that the replacement will provide the Wi-Fi coverage and connected-device compatibility your home needs.

Quick Recap

SaleBestseller No. 1
NETGEAR Nighthawk WiFi 6 Router (RAX30) 5-Stream Dual-Band Gigabit Router, AX2400 Wireless Speed (Up to 2.4 Gbps), Coverage Up to 2,000 sq.ft. and 20 Devices (Renewed)
NETGEAR Nighthawk WiFi 6 Router (RAX30) 5-Stream Dual-Band Gigabit Router, AX2400 Wireless Speed (Up to 2.4 Gbps), Coverage Up to 2,000 sq.ft. and 20 Devices (Renewed)
Coverage up to 2,000 sq. ft. and 20 devices; Plug in computers, game consoles, streaming players, and more with 4 x 1G Ethernet ports
$54.99
SaleBestseller No. 2
NETGEAR Nighthawk WiFi 6 Router (RAX30) - Security Features, 5-Stream Dual-Band Gigabit Router, AX2400 Wireless Speed (Up to 2.4 Gbps), Covers Up to 2,000 sq.ft. and 20 Devices
NETGEAR Nighthawk WiFi 6 Router (RAX30) - Security Features, 5-Stream Dual-Band Gigabit Router, AX2400 Wireless Speed (Up to 2.4 Gbps), Covers Up to 2,000 sq.ft. and 20 Devices
Coverage up to 2,000 sq. ft. and 20 devices; Plug in computers, game consoles, streaming players, and more with 4 x 1G Ethernet ports
$94.95
Bestseller No. 3
NETGEAR Nighthawk WiFi 6 Router (RAX36) – Router Only, AX3000 3 Gbps Wireless Speed – Dual-Band Gigabit Internet – Covers 2,000 sq. ft., 25 Devices – Built-in VPN, USB 3.0, Gaming
NETGEAR Nighthawk WiFi 6 Router (RAX36) – Router Only, AX3000 3 Gbps Wireless Speed – Dual-Band Gigabit Internet – Covers 2,000 sq. ft., 25 Devices – Built-in VPN, USB 3.0, Gaming
Coverage up to 2,000 sq. ft. for up to 25 devices; Plug in computers, game consoles, streaming players, and more with 4 x 1G Ethernet ports
$99.99
Best Value
Sale
NETGEAR Nighthawk Modem Router Combo (CAX30) DOCSIS 3.1 Cable Modem and WiFi 6 Router - AX2700 2.7 Gbps - Compatible with Xfinity, Spectrum, Cox, and More - Gigabit Wireless Internet
  • MAXIMIZE YOUR CABLE INTERNET AND WHOLE-HOME WIFI: A cable modem and WiFi router in one device unlocks the full potential of your home internet with faster downloads, smoother WiFi for gaming and video calls, and reliable coverage in every room.
  • APPROVED FOR YOUR PROVIDER AND PLAN: Works with Xfinity internet plans up to 800Mbps, Spectrum up to 1Gbps, and Cox up to 1Gbps. Not compatible with Verizon, AT&T, CenturyLink, DirecTV, DISH, or bundled voice plans. ISP activation required after setup.
  • MULTI-GIG DOCSIS 3.1 SPEEDS: Get Gigabit+ cable download speeds on today's fastest plans, with headroom for the upgrades ahead. Real-world speeds depend on your plan and ISP network.
  • WIFI 6 COVERAGE FOR THE WHOLE HOME: Stay connected in every room with dual-band AX2700 WiFi 6 covering up to 2,000 sq ft and capacity for 25+ connected devices. Real-world coverage depends on home size, layout, and building materials.
  • WIRED CONNECTIONS FOR YOUR FASTEST DEVICES: Four Gigabit Ethernet ports keep gaming consoles, desktops, and streaming devices hardwired for the lowest latency and the most stable connection in your home.
Rank #4
Sale
NETGEAR Nighthawk 5-Stream AX5 WiFi 6 Router (RAX43) AX4200 Wireless Speed (Up to 4.2 Gbps) | 2,000 sq. ft. Coverage (Renewed)
  • Super-Fast Modem: Experience smooth gaming, UHD video streaming, and faster file transfers with speeds up to 574MBPS plus 3603MBPS with the NETGEAR Nighthawk AX2400 5-Stream Dual-Band Wi-Fi 6 Router
  • Wi-Fi 6: With 4x more capacity, a 40 percent increase in data throughput, and 100 percent backwards compatibility, Wi-Fi 6 is the network to opt for
  • Nighthawk App: Set up and control your entire Wi-Fi network from the palm of your hand with the Nighthawk App
  • Processor: The powerful 1.5GHz triple-core processor is built for smooth 4K UHD streaming to Smart TVs, mobile devices, and gaming consoles
  • NETGEAR Armor: NETGEAR Armor keeps your family and your connected devices safe with an automatic shield of protection for your network to stop hackers, password thieves, ransomware, and brute force attacks
Router status Practical choice What to check
Supported, with current firmware available Install the latest firmware for the exact model. Model identity, installed version, and NETGEAR’s current support instructions.
Marked EoS, with no planned security updates Retire or replace the router. Replacement coverage and compatibility with devices already on the network.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.