CVE-2024-6813: Improper Neutralization of Special Elements used in an SQL Command

NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit this...

The vulnerability of the getSortString method in the microprogramming software for network devices in the ProSAFE Network Management System (NMS300) allows a perpetrator to execute arbitrary code.

The vulnerability of the getSortString method in the microprogramming software for network devices, the ProSAFE Network Management System NMS300, is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execu...