TI-2023-19520 CVE-2023-38096 · GHSA-whh9-qwjx-x7jq
Improper authentication in NETGEAR ProSAFE Network Management System
Priority CRITICAL 89
NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability.
NETGEAR
Records1365All Threatist records
Exploited (KEV)8In CISA KEV
CVSS critical217CVSS 9.0–10.0
CVSS high591CVSS 7.0–8.9
Exploited now
NETGEAR records in CISA KEVTI-2017-03537 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability TI-2017-04600 NETGEAR Multiple Devices Buffer Overflow Vulnerability TI-2016-08250 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability TI-2016-01416 NETGEAR Multiple WAP Devices Command Injection Vulnerability TI-2017-04162 NETGEAR DGN2200 Devices OS Command Injection Vulnerability TI-2016-05377 NETGEAR Multiple Routers Remote Code Execution Vulnerability
Components
Products in the NVD configurations · select one to filter the recordsRecords
24 records in Prosafe Network Management System · all components
TI-2023-19519 CVE-2023-38095 · GHSA-v2fh-w9pr-6754
Unrestricted file upload in NETGEAR ProSAFE Network Management System
Priority HIGH 76
NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability.
TI-2023-21791 CVE-2023-41182 · GHSA-mh66-93xc-j4c4
Path traversal in NETGEAR ProSAFE Network Management System
Priority HIGH 75
NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution Vulnerability.
TI-2021-08815 CVE-2021-27275 · GHSA-4gvg-m5r5-42mj
Path traversal in NETGEAR ProSAFE Network Management System
Priority HIGH 75
This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26.
TI-2021-08813 CVE-2021-27273 · GHSA-5jv4-p54c-22j4
OS command injection in NETGEAR ProSAFE Network Management System
Priority HIGH 74
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26.
TI-2023-27463 CVE-2023-50231 · GHSA-2fjm-5v6j-7r68
Cross-site scripting in NETGEAR ProSAFE Network Management System
Priority HIGH 73
NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability.
TI-2023-19523 CVE-2023-38099 · GHSA-52cj-r3hq-gxmp
SQL injection in NETGEAR ProSAFE Network Management System
Priority HIGH 73
NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability.
TI-2023-23956 CVE-2023-44450 · GHSA-g98j-4fw4-7cr7
SQL injection in NETGEAR ProSAFE Network Management System
Priority HIGH 72
NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability.
TI-2023-23955 CVE-2023-44449 · GHSA-7q35-3rwp-7fh3
SQL injection in NETGEAR ProSAFE Network Management System
Priority HIGH 72
NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability.
TI-2024-05116 CVE-2024-5505 · GHSA-r6jj-gm3m-wp7f
Path traversal in NETGEAR ProSAFE Network Management System
Priority HIGH 70
NETGEAR ProSAFE Network Management System UpLoadServlet Directory Traversal Remote Code Execution Vulnerability.
TI-2021-08812 CVE-2021-27272 · GHSA-qpvp-xhj2-299f
Path traversal in NETGEAR ProSAFE Network Management System
Priority HIGH 70
This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26.
TI-2021-08816 CVE-2021-27276 · GHSA-j2mm-7qvr-jmm2
Path traversal in NETGEAR ProSAFE Network Management System
Priority HIGH 69
This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26.
Priority MEDIUM 62
NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability.
TI-2023-19522 CVE-2023-38098 · GHSA-7r5r-hqcq-whmv
Unrestricted file upload in NETGEAR ProSAFE Network Management System
Priority MEDIUM 54
NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability.
TI-2021-08814 CVE-2021-27274 · GHSA-p4c8-3v5r-q3h7
Unrestricted file upload in NETGEAR ProSAFE Network Management System
Priority MEDIUM 53
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26.
TI-2024-06317 CVE-2024-6814 · GHSA-2pwf-wmm4-p5xg
SQL injection in NETGEAR ProSAFE Network Management System
Priority MEDIUM 44
NETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution Vulnerability.
TI-2024-06316 CVE-2024-6813 · GHSA-xr6g-6vm5-7r58
SQL injection in NETGEAR ProSAFE Network Management System
Priority MEDIUM 44
NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability.
TI-2023-27130 CVE-2023-49693 · GHSA-3836-54fg-7r66
NETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire Protocol
Priority MEDIUM 44
NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code.
TI-2023-19525 CVE-2023-38101 · GHSA-3xfc-m583-jq9v
NETGEAR ProSAFE Network Management System SettingConfigController Exposed Dangerous…
Priority MEDIUM 44
NETGEAR ProSAFE Network Management System SettingConfigController Exposed Dangerous Function Remote Code Execution Vulnerability.
TI-2023-19521 CVE-2023-38097 · GHSA-rx4x-7ch5-99xv
NETGEAR ProSAFE Network Management System BkreProcessThread Exposed Dangerous Function…
Priority MEDIUM 44
NETGEAR ProSAFE Network Management System BkreProcessThread Exposed Dangerous Function Remote Code Execution Vulnerability.
TI-2023-19526 CVE-2023-38102 · GHSA-mv86-4pvc-4wx9
Missing authorization in NETGEAR ProSAFE Network Management System
Priority MEDIUM 43
NETGEAR ProSAFE Network Management System createUser Missing Authorization Privilege Escalation Vulnerability.
TI-2023-19524 CVE-2023-38100 · GHSA-3484-2rvh-885x
SQL injection in NETGEAR ProSAFE Network Management System
Priority MEDIUM 43
NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability.
TI-2024-04869 CVE-2024-5245
NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation…
Priority LOW 37
NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation Vulnerability.
TI-2023-27131 CVE-2023-49694 · GHSA-r6ch-gxw2-7ffc
NETGEAR ProSAFE Network Management System Privilege Escalation Via MySQL Server
Priority LOW 35
A low-privileged OS user with access to a Windows host where NETGEAR ProSAFE Network Management System is installed can create arbitrary JSP files in a Tomcat web application directory.