Netgear Nighthawk RAX30
From Wiki-IoT
(diff) ← Older revision | Approved revision (diff) | Latest revision (diff) | Newer revision → (diff)
| Netgear Nighthawk RAX30 | ||
|---|---|---|
|
Security Grade
Calculator v1
|
Netgear Nighthawk RAX30
Brand: Netgear Category: Router • Model / Gen: Wi-Fi 6 Nighthawk RAX30 (AX2400) Release Date: 2022-01-01 • Status: In sale Classification Date: 2026-10-21 • [www.netgear.com/ Official Website] | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Rare | [kb.netgear.com/000065928/ 🔗 Proof] | No mass physical-tampering campaign; issues are remote/network. |
| Known vulnerabilities | Very common | [kb.netgear.com/000065928/ 🔗 Proof] | Multiple 2023–2024 flaws: CVE-2023-40479 (unauthenticated UPnP command injection RCE), CVE-2023-27367 (command injection RCE), CVE-2023-34284 (hard-coded credentials authentication bypass), and CVE-2023-51634 (improper certificate validation in firmware update). Fixed in firmware 1.0.12.100_HOTFIX. |
| Prior attacks | Rare | [kb.netgear.com/000065928/ 🔗 Proof] | No CISA KEV entry; no known mass exploitation of this model. |
| Updatability | Very common | [kb.netgear.com/000065928/ 🔗 Proof] | Netgear issues firmware hotfixes; auto-update available. |
| Category Score | Score: 2 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Partial | [www.netgear.com/ 🔗 Proof] | Nighthawk app/cloud and Alexa integration; local admin authentication. |
| Communications | Encrypted with obselete encryption | [www.netgear.com/ 🔗 Proof] | Management over HTTPS/HTTP with mixed protection. |
| Storage | No encryption | [www.netgear.com/ 🔗 Proof] | CVE-2023-27370 documents cleartext storage of device configuration. |
| Category Score | Score: 3 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Basic | [www.netgear.com/ 🔗 Proof] | Single admin account with basic roles. |
| Authentication | Basic | [kb.netgear.com/000065928/ 🔗 Proof] | Hard-coded credentials allowed authentication bypass (CVE-2023-34284). |
| Brute-force protection | Basic | [www.netgear.com/ 🔗 Proof] | No documented lockout policy. |
| Event logging | Partial logging | [www.netgear.com/ 🔗 Proof] | System logs present; authentication events not exposed as an audit trail. |
| Passwords | Require change after setup | [www.netgear.com/ 🔗 Proof] | Admin password set at first setup; complexity enforcement basic. |
| Category Score | Score: 2 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | Netgear firmware (Companion App: Nighthawk App) |
| Hardware (CPU / GPU) | CPU: Not publicly specified • GPU: N/A |
| Memory & Storage | Memory: Not publicly specified • Storage: Not publicly specified |
| Power, Battery & Charging | Battery: N/A • Power: AC adapter • Charging: N/A |
| Display & Camera | Display: N/A • Camera: N/A |
| Sound & Connectivity | Sound: N/A • Connectivity: Wi-Fi 6 (2.4/5 GHz), Ethernet |
| Physical (Dimensions & Mass) | Dimensions: Not publicly specified • Mass: Not publicly specified |
