The vulnerability is an authentication bypass that allows an unauthenticated attacker who can physically or otherwise reach the router’s local network to authenticate to the device’s management service, gaining read or write access to configuration data. This can compromise the confidentiality of device settings, alter configuration to degrade or disable service, and potentially disrupt network operations. The weakness is classified as CWE‑288, indicating a failure to verify authentication.

NETGEAR’s RAX28, RAX29, and RAX30 Nighthawk AX5/AX2400 models are affected. All firmware versions prior to 1.0.15.110 contain the flaw; devices that have not applied the latest firmware remain vulnerable. Automatic updates may have already fixed the issue, but users should verify their firmware version.

The CVSS score of 6.3 places the weakness in the medium to high impact range, and the EPSS score is unavailable, so no exploitation probability is currently reported. The vulnerability is not listed in CISA’s KEV catalog, suggesting limited known exploitation. Attackers require adjacent network access to interact with the management service; therefore, the risk is highest in environments where the router is exposed to untrusted local users or is not isolated from other devices.