The vulnerability of Netgear ProSafe NMS300 network devices’ microprogramming software, related to the use of default credentials, allows attackers to escalate their privileges.

🗓️ 18 Jun 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 17 Views

Netgear ProSafe NMS300 devices have a default credentials vulnerability that allows privilege escalation.

Reporter	Title	Published	Views	Family All 10
CNNVD	NETGEAR ProSAFE Network Management System 安全漏洞	23 May 202400:00	–	cnnvd
CNVD	NETGEAR ProSAFE Network Management System Elevation of Privilege Vulnerability	27 May 202400:00	–	cnvd
CVE	CVE-2024-5245	23 May 202422:07	–	cve
Cvelist	CVE-2024-5245 NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation Vulnerability	23 May 202422:07	–	cvelist
EUVD	EUVD-2024-46484	3 Oct 202520:07	–	euvd
NVD	CVE-2024-5245	23 May 202422:15	–	nvd
OSV	CVE-2024-5245	23 May 202422:15	–	osv
Positive Technologies	PT-2024-4161 · NetGear · Netgear Prosafe Network Management System	11 Jan 202400:00	–	ptsecurity
Vulnrichment	CVE-2024-5245 NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation Vulnerability	23 May 202422:07	–	vulnrichment
Zero Day Initiative	NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation Vulnerability	22 May 202400:00	–	zdi

Vulners

Node

netgear prosafe_network_management_system_(nms300)Range<1.7.0.37

Source	Link
kb	www.kb.netgear.com/000066164/Security-Advisory-for-Multiple-Vulnerabilities-on-the-NMS300-PSV-2024-0003-PSV-2024-0004
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-24-496/
web	www.web.nvd.nist.gov/view/vuln/detail
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-24-496/

18 Jun 2024 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 26.8

CVSS 37.8

EPSS0.00568

Netgear NMS300 default credentials privilege escalation network device software