Lucene search

CVE-2024-5246

🗓️ 23 May 2024 22:14:15Reported by zdiType

cve🔗 web.nvd.nist.gov👁 80 Views🌐 WEB

NETGEAR ProSAFE NMS Tomcat Remote Code Execution Vulnerabilit

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
Zero Day Initiative	NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerability	22 May 202400:00	–	zdi
Cvelist	CVE-2024-5246 NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerability	23 May 202422:07	–	cvelist
Vulnrichment	CVE-2024-5246 NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerability	23 May 202422:07	–	vulnrichment
NVD	CVE-2024-5246	23 May 202422:15	–	nvd
GithubExploit	Exploit for CVE-2024-5246	2 Aug 202420:56	–	githubexploit

Vulners

Vulnrichment

Node

netgear prosafe_network_management_systemRange≤1.7.0.34

[
  {
    "vendor": "NETGEAR",
    "product": "ProSAFE Network Management System",
    "versions": [
      {
        "version": "1.7.0.34 x64",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
kb	www.kb.netgear.com/000066164/Security-Advisory-for-Multiple-Vulnerabilities-on-the-NMS300-PSV-2024-0003-PSV-2024-0004
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-24-497/

Parameter	Position	Path	Description	CWE
target-ip	path	/manager/html	Endpoint for Tomcat Manager interface that can be exploited to deploy malicious applications.	CWE-1395
port	path	/manager/html	Endpoint for Tomcat Manager interface that can be exploited to deploy malicious applications.	CWE-1395
path	path	/deploy	Tomcat Manager deployment endpoint that allows deployment of web applications, which can be exploited to run arbitrary code.	CWE-1395
war	path	/deploy	Tomcat Manager deployment endpoint that allows deployment of web applications, which can be exploited to run arbitrary code.	CWE-1395

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 May 2024 22:15Current

9.1High risk

Vulners AI Score9.1

CVSS38.8

EPSS0.29233

SSVC

CWE-1395