Lucene search

ZdiCVE-2021-27273

HistoryMar 29, 2021 - 9:15 p.m.

CVE-2021-27273

2021-03-2921:15:13

CWE-78

zdi

web.nvd.nist.gov

vulnerability

netgear

prosafe

network management system

rce

code execution

authentication bypass

zdi-can-12121

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.076

Percentile

94.3%

JSON

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the SettingConfigController class. When parsing the fileName parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-12121.

Affected configurations

Nvd

Vulners

Node

netgearprosafe_network_management_systemMatch1.6.0.26

VendorProductVersionCPE
netgearprosafe_network_management_system1.6.0.26cpe:2.3:a:netgear:prosafe_network_management_system:1.6.0.26:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
netgear	prosafe_network_management_system	1.6.0.26	cpe:2.3:a:netgear:prosafe_network_management_system:1.6.0.26:::::::*

CNA Affected

[
  {
    "product": "ProSAFE Network Management System",
    "vendor": "NETGEAR",
    "versions": [
      {
        "status": "affected",
        "version": "1.6.0.26"
      }
    ]
  }
]

References

kb.netgear.com/000062686/Security-Advisory-for-Post-Authentication-Command-Injection-on-NMS300-PSV-2020-0559

www.zerodayinitiative.com/advisories/ZDI-21-356/

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.076

Percentile

94.3%

JSON

Related for CVE-2021-27273