Lucene search
TenableCVELIST:CVE-2023-49693HistoryNov 29, 2023 - 10:41 p.m.
CVE-2023-49693 NETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire Protocol
2023-11-2922:41:02
CWE-306
tenable
www.cve.org
5
netgear
prosafe
management system
rce
vulnerability
java debug wire protocol
port 11611
unauthenticated access
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
10
Confidence
High
EPSS
0.002
Percentile
52.0%
NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "NETGEAR ProSAFE Network Management System",
"vendor": "NETGEAR",
"versions": [
{
"lessThan": "1.7.0.34",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
10
Confidence
High
EPSS
0.002
Percentile
52.0%
Related for CVELIST:CVE-2023-49693