NETGEAR Orbi 760 SOAP API Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR Orbi 760 routers. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the implementation of the SOAP API. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-20524.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://kb.netgear.com/000065734/Security-Advisory-for-Authentication-Bypass-on-the-RBR760-PSV-2023-0052 | Vendor Advisory |
| https://kb.netgear.com/000065734/Security-Advisory-for-Authentication-Bypass-on-the-RBR760-PSV-2023-0052 | Vendor Advisory |
| https://www.zerodayinitiative.com/advisories/ZDI-23-1283/ | Third Party Advisory |
| https://www.zerodayinitiative.com/advisories/ZDI-23-1283/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
08 Aug 2025, 18:39
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:netgear:rbr760_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:netgear:rbr760:-:*:*:*:*:*:*:* |
|
| First Time |
Netgear rbr760 Firmware
Netgear Netgear rbr760 |
|
| References | () https://www.zerodayinitiative.com/advisories/ZDI-23-1283/ - Third Party Advisory | |
| References | () https://kb.netgear.com/000065734/Security-Advisory-for-Authentication-Bypass-on-the-RBR760-PSV-2023-0052 - Vendor Advisory |
03 May 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-05-03 03:15
Updated : 2025-08-08 18:39
NVD link : CVE-2023-41183
Mitre link : CVE-2023-41183
JSON object : View
Products Affected
netgear
- rbr760
- rbr760_firmware
CWE
No CWE.