Vulnerabilities

TI-2024-06317 CVE-2024-6814 · GHSA-2pwf-wmm4-p5xg

SQL injection in NETGEAR ProSAFE Network Management System

MEDIUM 44

NETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02091 Published 2024-08-21 No fix listed CWE-89

TI-2024-06316 CVE-2024-6813 · GHSA-xr6g-6vm5-7r58

SQL injection in NETGEAR ProSAFE Network Management System

MEDIUM 44

NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01847 Published 2024-08-21 No fix listed CWE-89

TI-2024-05116 CVE-2024-5505 · GHSA-r6jj-gm3m-wp7f

Path traversal in NETGEAR ProSAFE Network Management System

HIGH 70

NETGEAR ProSAFE Network Management System UpLoadServlet Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.46989 Published 2024-06-06 No fix listed CWE-22

TI-2024-04871 CVE-2024-5247

Unrestricted file upload in NETGEAR ProSAFE Network Management System

MEDIUM 62

NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.26919 Published 2024-05-23 No fix listed CWE-434

TI-2024-04869 CVE-2024-5245

NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation…

LOW 37

NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00568 Published 2024-05-23 No fix listed CWE-1392

TI-2023-27463 CVE-2023-50231 · GHSA-2fjm-5v6j-7r68

Cross-site scripting in NETGEAR ProSAFE Network Management System

HIGH 73

NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.53303 Published 2024-05-03 No fix listed CWE-79

TI-2023-23956 CVE-2023-44450 · GHSA-g98j-4fw4-7cr7

SQL injection in NETGEAR ProSAFE Network Management System

HIGH 72

NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.53563 Published 2024-05-03 No fix listed CWE-89

TI-2023-23955 CVE-2023-44449 · GHSA-7q35-3rwp-7fh3

SQL injection in NETGEAR ProSAFE Network Management System

HIGH 72

NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.52562 Published 2024-05-03 No fix listed CWE-89

TI-2023-21791 CVE-2023-41182 · GHSA-mh66-93xc-j4c4

Path traversal in NETGEAR ProSAFE Network Management System

HIGH 75

NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.62287 Published 2024-05-03 No fix listed CWE-22

TI-2023-19526 CVE-2023-38102 · GHSA-mv86-4pvc-4wx9

Missing authorization in NETGEAR ProSAFE Network Management System

MEDIUM 43

NETGEAR ProSAFE Network Management System createUser Missing Authorization Privilege Escalation Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01406 Published 2024-05-03 No fix listed CWE-862

TI-2023-19525 CVE-2023-38101 · GHSA-3xfc-m583-jq9v

NETGEAR ProSAFE Network Management System SettingConfigController Exposed Dangerous…

MEDIUM 44

NETGEAR ProSAFE Network Management System SettingConfigController Exposed Dangerous Function Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02135 Published 2024-05-03 No fix listed CWE-749

TI-2023-19524 CVE-2023-38100 · GHSA-3484-2rvh-885x

SQL injection in NETGEAR ProSAFE Network Management System

MEDIUM 43

NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01424 Published 2024-05-03 No fix listed CWE-89

TI-2023-19523 CVE-2023-38099 · GHSA-52cj-r3hq-gxmp

SQL injection in NETGEAR ProSAFE Network Management System

HIGH 73

NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.56756 Published 2024-05-03 No fix listed CWE-89

TI-2023-19522 CVE-2023-38098 · GHSA-7r5r-hqcq-whmv

Unrestricted file upload in NETGEAR ProSAFE Network Management System

MEDIUM 54

NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.12658 Published 2024-05-03 No fix listed CWE-434

TI-2023-19521 CVE-2023-38097 · GHSA-rx4x-7ch5-99xv

NETGEAR ProSAFE Network Management System BkreProcessThread Exposed Dangerous Function…

MEDIUM 44

NETGEAR ProSAFE Network Management System BkreProcessThread Exposed Dangerous Function Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02135 Published 2024-05-03 No fix listed CWE-749

TI-2023-19520 CVE-2023-38096 · GHSA-whh9-qwjx-x7jq

Improper authentication in NETGEAR ProSAFE Network Management System

CRITICAL 89

NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.82035 Published 2024-05-03 No fix listed CWE-287

TI-2023-19519 CVE-2023-38095 · GHSA-v2fh-w9pr-6754

Unrestricted file upload in NETGEAR ProSAFE Network Management System

HIGH 76

NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.65899 Published 2024-05-03 No fix listed CWE-434

TI-2023-27131 CVE-2023-49694 · GHSA-r6ch-gxw2-7ffc

NETGEAR ProSAFE Network Management System Privilege Escalation Via MySQL Server

LOW 35

A low-privileged OS user with access to a Windows host where NETGEAR ProSAFE Network Management System is installed can create arbitrary JSP files in a Tomcat web application directory.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00537 Published 2023-11-29 Fixed in 1.7.0.34 CWE-284

TI-2023-27130 CVE-2023-49693 · GHSA-3836-54fg-7r66

NETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire Protocol

MEDIUM 44

NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01154 Published 2023-11-29 Fixed in 1.7.0.34 CWE-306

TI-2021-08816 CVE-2021-27276 · GHSA-j2mm-7qvr-jmm2

Path traversal in NETGEAR ProSAFE Network Management System

HIGH 69

This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.73248 Published 2021-03-29 No fix listed CWE-22

TI-2021-08815 CVE-2021-27275 · GHSA-4gvg-m5r5-42mj

Path traversal in NETGEAR ProSAFE Network Management System

HIGH 75

This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.74078 Published 2021-03-29 No fix listed CWE-22

TI-2021-08814 CVE-2021-27274 · GHSA-p4c8-3v5r-q3h7

Unrestricted file upload in NETGEAR ProSAFE Network Management System

MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08452 Published 2021-03-29 No fix listed CWE-434

TI-2021-08813 CVE-2021-27273 · GHSA-5jv4-p54c-22j4

OS command injection in NETGEAR ProSAFE Network Management System

HIGH 74

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.66005 Published 2021-03-29 No fix listed CWE-78

TI-2021-08812 CVE-2021-27272 · GHSA-qpvp-xhj2-299f

Path traversal in NETGEAR ProSAFE Network Management System

HIGH 70

This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.7451 Published 2021-03-29 No fix listed CWE-22

Vulnerabilities

Filters