Vulnerabilities

TI-2023-27131 CVE-2023-49694 · GHSA-r6ch-gxw2-7ffc

NETGEAR ProSAFE Network Management System Privilege Escalation Via MySQL Server

LOW 35

A low-privileged OS user with access to a Windows host where NETGEAR ProSAFE Network Management System is installed can create arbitrary JSP files in a Tomcat web application directory.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00537 Published 2023-11-29 Fixed in 1.7.0.34 CWE-284

TI-2023-27130 CVE-2023-49693 · GHSA-3836-54fg-7r66

NETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire Protocol

MEDIUM 44

NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01154 Published 2023-11-29 Fixed in 1.7.0.34 CWE-306

Vulnerabilities

Filters

NETGEAR ProSAFE Network Management System Privilege Escalation Via MySQL Server

NETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire Protocol