Vulnerabilities

TI-2023-19526 CVE-2023-38102 · GHSA-mv86-4pvc-4wx9

Missing authorization in NETGEAR ProSAFE Network Management System

MEDIUM 43

NETGEAR ProSAFE Network Management System createUser Missing Authorization Privilege Escalation Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01406 Published 2024-05-03 No fix listed CWE-862

TI-2023-19525 CVE-2023-38101 · GHSA-3xfc-m583-jq9v

MEDIUM 44

NETGEAR ProSAFE Network Management System SettingConfigController Exposed Dangerous Function Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02135 Published 2024-05-03 No fix listed CWE-749

TI-2023-19524 CVE-2023-38100 · GHSA-3484-2rvh-885x

MEDIUM 43

NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01424 Published 2024-05-03 No fix listed CWE-89

TI-2023-19523 CVE-2023-38099 · GHSA-52cj-r3hq-gxmp

HIGH 73

NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.56756 Published 2024-05-03 No fix listed CWE-89

TI-2023-19522 CVE-2023-38098 · GHSA-7r5r-hqcq-whmv

MEDIUM 54

NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.12658 Published 2024-05-03 No fix listed CWE-434

TI-2023-19521 CVE-2023-38097 · GHSA-rx4x-7ch5-99xv

MEDIUM 44

NETGEAR ProSAFE Network Management System BkreProcessThread Exposed Dangerous Function Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02135 Published 2024-05-03 No fix listed CWE-749

TI-2023-19520 CVE-2023-38096 · GHSA-whh9-qwjx-x7jq

CRITICAL 89

NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.82035 Published 2024-05-03 No fix listed CWE-287

TI-2023-19519 CVE-2023-38095 · GHSA-v2fh-w9pr-6754

HIGH 76

NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.65899 Published 2024-05-03 No fix listed CWE-434