Lucene search
HistoryNov 29, 2023 - 11:15 p.m.
CVE-2023-49693
cve-2023-49693
netgear prosafe
network management system
jdwp
remote code execution
unauthenticated access
arbitrary code
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
52.0%
NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code.
Affected configurations
Node
netgearprosafe_network_management_systemRange<1.7.0.34
| Vendor | Product | Version | CPE |
|---|---|---|---|
| netgear | prosafe_network_management_system | * | cpe:2.3:a:netgear:prosafe_network_management_system:*:*:*:*:*:*:*:* |
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
52.0%
Related for NVD:CVE-2023-49693