This vulnerability in the NETGEAR CAX30 router involves improper input validation, enabling an unauthenticated attacker on the local network to gain control over the router and alter its operation without authorization. The CVSS 4.0 base score is 5.2, reflecting medium severity with attack vector limited to adjacent network, low attack complexity, no privileges required, and no user interaction needed. The vulnerability impacts confidentiality, integrity, and availability with high impact. No vendor advisory or patch information is currently provided, and no known exploits have been reported.

An unauthenticated attacker on the local network can fully control the affected NETGEAR CAX30 router, potentially leading to unauthorized configuration changes that compromise the device's confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local network access to trusted users only and monitor for unusual router behavior.