CVE-2023-2380

MEDIUM

Netgear SRX5308 <= 4.3.5-3 - Denial of Service

Title source: llm
STIX 2.1

Description

A vulnerability, which was classified as problematic, was found in Netgear SRX5308 up to 4.3.5-3. Affected is an unknown function. The manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-227658 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.227658
Permissions Required, Third Party Advisory, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.227658
Exploit, Third Party Advisory broken-link exploit
https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/17

Scores

CVSS v3 6.5
EPSS 0.0057
EPSS Percentile 68.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-404
Status published
Products (1)
netgear/srx5308_firmware 4.3.5-3
Published Apr 28, 2023
Tracked Since Feb 18, 2026