CVE-2016-1525

🗓️ 13 Feb 2016 02:00:00Reported by certccType

cve🔗 web.nvd.nist.gov👁 53 Views🌐 WEB

CVE-2016-1525 Directory traversal vulnerability in NETGEAR Management System NMS300 1.5.0.1

Reporter	Title	Published	Views	Family All 16
0day.today	Netgear ProSafe Network Management System NMS300 - Multiple Vulnerabilities	4 Feb 201600:00	–	zdt
0day.today	Netgear ProSafe Network Management System 300 - Arbitrary File Upload (Metasploit)	1 Mar 201600:00	–	zdt
Circl	CVE-2016-1525	1 Mar 201600:00	–	circl
CNVD	Netgear Management System NMS300 Directory Traversal Vulnerability	8 Feb 201600:00	–	cnvd
Check Point Advisories	Netgear ProSAFE NMS300 fileUpload.do Arbitrary File Upload (CVE-2016-1524; CVE-2016-1525)	23 May 201600:00	–	checkpoint_advisories
Cvelist	CVE-2016-1525	13 Feb 201602:00	–	cvelist
Exploit DB	Netgear NMS300 ProSafe Network Management System - Multiple Vulnerabilities	4 Feb 201600:00	–	exploitdb
Exploit DB	Netgear NMS300 ProSafe Network Management System - Arbitrary File Upload (Metasploit)	1 Mar 201600:00	–	exploitdb
exploitpack	NETGEAR NMS300 ProSafe Network Management System - Multiple Vulnerabilities	4 Feb 201600:00	–	exploitpack
Metasploit	NETGEAR ProSafe Network Management System 300 Arbitrary File Upload	3 Feb 201623:54	–	metasploit

NVD

Node

Source	Link
kb	www.kb.cert.org/vuls/id/777024
securityfocus	www.securityfocus.com/archive/1/537446/100/0/threaded
packetstormsecurity	www.packetstormsecurity.com/files/135618/Netgear-Pro-NMS-300-Code-Execution-File-Download.html
packetstormsecurity	www.packetstormsecurity.com/files/135999/NETGEAR-ProSafe-Network-Management-System-300-Arbitrary-File-Upload.html
rapid7	www.rapid7.com/db/modules/exploit/windows/http/netgear_nms_rce
exploit-db	www.exploit-db.com/exploits/39412/
exploit-db	www.exploit-db.com/exploits/39515/
seclists	www.seclists.org/fulldisclosure/2016/Feb/30

Parameter	Position	Path	Description	CWE
realName	request body	data/config/image.do?method=add	Directory traversal vulnerability allowing reading arbitrary files via realName parameter in image creation	CWE-22
md5	request body	data/config/image.do?method=add	Directory traversal vulnerability allowing reading arbitrary files via realName parameter in image creation	CWE-22
fileName	request body	data/config/image.do?method=add	Directory traversal vulnerability allowing reading arbitrary files via realName parameter in image creation	CWE-22
version	request body	data/config/image.do?method=add	Directory traversal vulnerability allowing reading arbitrary files via realName parameter in image creation	CWE-22
vendor	request body	data/config/image.do?method=add	Directory traversal vulnerability allowing reading arbitrary files via realName parameter in image creation	CWE-22
deviceType	request body	data/config/image.do?method=add	Directory traversal vulnerability allowing reading arbitrary files via realName parameter in image creation	CWE-22
deviceModel	request body	data/config/image.do?method=add	Directory traversal vulnerability allowing reading arbitrary files via realName parameter in image creation	CWE-22
description	request body	data/config/image.do?method=add	Directory traversal vulnerability allowing reading arbitrary files via realName parameter in image creation	CWE-22

06 May 2026 22:30Current

8.4High risk

Vulners AI Score8.4

CVSS 27.8

CVSS 38.6

EPSS0.80313