PT-2018-2657

Name of the Vulnerable Software and Affected Versions Yokogawa CENTUM CS 3000 versions R3.05.00 through R3.09.50 Yokogawa CENTUM CS 3000 Entry Class versions R3.05.00 through R3.09.50 Yokogawa CENTUM VP versions R4.01.00 through R6.03.10 Yokogawa CENTUM VP Entry Class versions R4.01.00 through...

PT-2018-1511

Name of the Vulnerable Software and Affected Versions YOKOGAWA iDefine for ProSafe-RS versions 1.16.3 and earlier YOKOGAWA STARDOM VDS versions 7.50 and earlier YOKOGAWA STARDOM FCN/FCJ Simulator versions 4.20 and earlier YOKOGAWA ASTPLANNER versions 15.01 and earlier YOKOGAWA TriFellows versions...

NETGEAR ProSAFE Devices Detection (Telnet)

Telnet based detection of NETGEAR ProSAFE devices. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NETGEAR ProSAFE Devices Detection (HTTP)

HTTP based detection of NETGEAR ProSAFE devices. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NETGEAR ProSAFE Device Detection Consolidation

Consolidation of NETGEAR ProSAFE device detections. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NETGEAR ProSAFE GS108T Default Credentials (HTTP)

The remote NETGEAR ProSAFE GS108E device has the default password SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX = "cpe:/o:netgear:"...

Netgear Fixes 50 Vulnerabilities in Routers, Switches, NAS Devices

Netgear recently issued 50 patches for its routers, switches, NAS devices, and wireless access points to resolve vulnerabilities ranging from remote code execution bugs to authentication bypass flaws. Twenty of the patches address “high” vulnerability issues with the remaining 30 scored as “mediu...

NETGEAR ProSAFE Devices Detection (SNMP)

This script performs SNMP based detection of NETGEAR ProSAFE devices. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-2137

ProSAFE Plus Configuration Utility prior to 2.3.29 allows remote attackers to bypass access restriction and change configurations of the switch via SOAP requests...

CVE-2017-2137

ProSAFE Plus Configuration Utility prior to 2.3.29 allows remote attackers to bypass access restriction and change configurations of the switch via SOAP requests...

Design/Logic Flaw

ProSAFE Plus Configuration Utility prior to 2.3.29 allows remote attackers to bypass access restriction and change configurations of the switch via SOAP requests...

CVE-2017-2137

CVE-2017-2137 affects NETGEAR ProSAFE Plus Configuration Utility prior to 2.3.29. The Vulnerability is an improper access control flaw that allows remote attackers to bypass access restrictions and modify switch configurations via SOAP requests. Affected component is the Windows-based Configurati...

CVE-2017-2137

ProSAFE Plus Configuration Utility prior to 2.3.29 allows remote attackers to bypass access restriction and change configurations of the switch via SOAP requests...

PT-2017-15202

Name of the Vulnerable Software and Affected Versions ProSAFE Plus Configuration Utility versions prior to 2.3.29 Description The issue allows remote attackers to bypass access restrictions and modify switch configurations via SOAP requests. Recommendations For versions prior to 2.3.29, update to...

CVE-2017-2137: Undefined Security Weakness

ProSAFE Plus Configuration Utility prior to 2.3.29 allows remote attackers to bypass access restriction and change configurations of the switch via SOAP requests...

NETGEAR ProSAFE Plus Configuration Utility vulnerable to improper access control

Overview ProSAFE Plus Configuration Utility provided by NETGEAR is a Windows application to configure and manage NETGEAR's ProSAFE Plus and Click Switches. An operator uses the utility to login and configure NETGEAR switches. When the utility is invoked, it starts listening on a certain port for...

JVN#08740778: NETGEAR ProSAFE Plus Configuration Utility vulnerable to improper access control

ProSAFE Plus Configuration Utility provided by NETGEAR is a Windows application to configure and manage NETGEAR's ProSAFE Plus and Click Switches. An operator uses the utility to login and configure NETGEAR switches. When the utility is invoked, it starts listening on a certain port for SOAP...

NETGEAR ProSAFE Plus Configuration Utility Incorrect Access Control Vulnerability

NetGear ProSafe is the smart switch product for monitoring and configuring your network. An incorrect access control vulnerability exists in the NETGEAR ProSAFE Plus Configuration Utility, which can be exploited by an attacker to perform switch configuration tasks based on SOAP requests...

Netgear ProSAFE NMS300 fileUpload.do Arbitrary File Upload (CVE-2016-1524; CVE-2016-1525)

An arbitrary file upload vulnerability exists in Netgear ProSafe NMS300. The vulnerability is due to inadequate access control and input validation error when accepting user uploaded files to fileUpload.do control. A remote unauthenticated attacker could exploit this vulnerability by sending...

NETGEAR ProSAFE GS108T Default Credentials (HTTP)

The remote NETGEAR ProSAFE GS108T device has the default password SPDX-FileCopyrightText: 2016 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPEPREFIX =...