CVE-2023-38095: Unrestricted Upload of File with Dangerous Type

NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is...

NETGEAR ProSAFE 安全漏洞

NETGEAR ProSAFE Network Management System is a network management system. The NETGEAR ProSAFE Network Management System suffers from a SQL injection vulnerability that originates in the clearAlertByIds function and can be exploited by an attacker to obtain sensitive information or execute arbitra...

CVE-2023-44450: Improper Neutralization of Special Elements used in an SQL Command

NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to explo...

NETGEAR ProSAFE 安全漏洞

NETGEAR ProSAFE is a network management system from NETGEAR. An elevation of privilege vulnerability exists in NETGEAR ProSAFE, which can be exploited by an attacker to elevate privileges...

NETGEAR ProSAFE 安全漏洞

NETGEAR ProSAFE is a network management system from NETGEAR. NETGEAR ProSAFE suffers from an authentication bypass vulnerability that can be exploited by an attacker to bypass authentication...

NETGEAR ProSAFE 安全漏洞

NETGEAR ProSAFE Network Management System is a network management system from NETGEAR for centralized management, monitoring, and configuration of network devices. A code execution vulnerability exists in NETGEAR ProSAFE Network Management System, which stems from a remote code execution...

CVE-2023-41182: Improper Limitation of a Pathname to a Restricted Directory

NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is required to exploit...

NETGEAR ProSAFE 安全漏洞

NETGEAR ProSAFE is a network management system from NETGEAR. NETGEAR ProSAFE suffers from a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code...

CVE-2023-38102: Missing Authorization

NETGEAR ProSAFE Network Management System createUser Missing Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is required to exploit...

CVE-2023-38100: Improper Neutralization of Special Elements used in an SQL Command

NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is required to exploit this...

NETGEAR ProSAFE 安全漏洞

NETGEAR ProSAFE is a network management system from NETGEAR. An elevation of privilege vulnerability exists in NETGEAR ProSAFE, which can be exploited by an attacker to elevate privileges...

CVE-2023-38101: Exposed Dangerous Method or Function

NETGEAR ProSAFE Network Management System SettingConfigController Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is...

CVE-2023-38097: Exposed Dangerous Method or Function

NETGEAR ProSAFE Network Management System BkreProcessThread Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is...

CVE-2023-50231: Improper Neutralization of Input During Web Page Generation

NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Minimal user interaction is required to exploi...

NETGEAR ProSAFE 安全漏洞

NETGEAR ProSAFE is a network management system from NETGEAR. NETGEAR ProSAFE suffers from a SQL injection vulnerability that can be exploited by an attacker to execute arbitrary code...

NETGEAR ProSAFE 安全漏洞

NETGEAR ProSAFE is a network management system from NETGEAR. NETGEAR ProSAFE suffers from a directory traversal vulnerability that can be exploited by an attacker to execute arbitrary code...

NETGEAR ProSAFE 安全漏洞

NETGEAR ProSAFE is a network management system from NETGEAR. An arbitrary file upload vulnerability exists in NETGEAR ProSAFE, which can be exploited by an attacker to execute arbitrary code...

PT-2024-4161 · NetGear · Netgear Prosafe Network Management System

Name of the Vulnerable Software and Affected Versions: NETGEAR ProSAFE Network Management System affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations. The flaw exists within the product installer due to the use of default...

CVE-2023-49693

NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol JDWP listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code...

CVE-2023-49694

A low-privileged OS user with access to a Windows host where NETGEAR ProSAFE Network Management System is installed can create arbitrary JSP files in a Tomcat web application directory. The user can then execute the JSP files under the security context of SYSTEM...