TI-2023-00817 CVE-2023-0862 · GHSA-hp6q-h54g-hcww
Path Traversal in NetModule NSRW
Priority HIGH 73
The NetModule NSRW web administration interface is vulnerable to path traversals, which could lead to arbitrary file uploads and deletion.
NetModule
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
NetModule records in CISA KEVNo NetModule vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records in Netmodule Router Software · all components
TI-2023-00816 CVE-2023-0861 · GHSA-2w6q-88hw-j7gp
Authenticated Command Injection in NetModule NSRW
Priority HIGH 73
NetModule NSRW web administration interface executes an OS command constructed with unsanitized user input.
TI-2023-24920 CVE-2023-46306 · GHSA-4qww-v3r6-7335
The web administration interface in NetModule Router Software (NRSW) 4.6 before 4.6.0.106…
Priority HIGH 72
The web administration interface in NetModule Router Software (NRSW) 4.6 before 4.6.0.106 and 4.8 before 4.8.0.101 executes an OS command constructed with unsanitized user input: shell metacharacters in the /admin/gnssAu…
TI-2021-16665 CVE-2021-39290 · GHSA-9frw-v7wh-vjcg
Certain NetModule devices allow Limited Session Fixation via PHPSESSID.
Priority MEDIUM 45
Certain NetModule devices allow Limited Session Fixation via PHPSESSID.
TI-2021-16666 CVE-2021-39291 · GHSA-46vv-mmqm-cfv8
Certain NetModule devices allow credentials via GET parameters to CLI-PHP.
Priority MEDIUM 41
Certain NetModule devices allow credentials via GET parameters to CLI-PHP.
TI-2021-16664 CVE-2021-39289 · GHSA-55w8-xhrf-5797
Certain NetModule devices have Insecure Password Handling (cleartext or reversible…
Priority LOW 35
Certain NetModule devices have Insecure Password Handling (cleartext or reversible encryption), These models with firmware before 4.3.0.113, 4.4.0.111, and 4.5.0.105 are affected: NB800, NB1600, NB1601, NB1800, NB1810, N…