EUVD-2014-4783

Malware in sbrugna...

TFTP Netgear ProSafe Plus DoS

The vulnerability of the TFTP microprogramming software used in Netgear ProSafe Plus JGS516PE and ProSAFE Plus GS116Ev2 network devices is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Netgear ProSafe Plus DHCP DoS

The vulnerability of the DCHP configuration of Netgear ProSafe Plus JGS516PE and ProSAFE Plus GS116Ev2 networking devices relates to insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability can allow a malicious actor to trigger...

Netgear ProSafe Plus Privilege Escalation

The vulnerability of the mechanism for updating microprogrammable software in Netgear ProSafe Plus JGS516PE and ProSAFE Plus GS116Ev2 devices is related to deficiencies in input data validation. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

NSDP Protocol Bypass Full Control

The vulnerability of the NSDP protocol implementation in Netgear ProSafe Plus JGS516PE and ProSAFE Plus GS116Ev2 networking devices is related to authentication process errors. Exploiting this vulnerability allows an attacker to bypass access controls and gain full control over the device...

New Mirai Variant and ZHtrap Botnet Malware Emerge in the Wild

Cybersecurity researchers on Monday disclosed a new wave of ongoing attacks exploiting multiple vulnerabilities to deploy new Mirai variants on internet connected devices. "Upon successful exploitation, the attackers try to download a malicious shell script, which contains further infection...

PT-2021-2436

Name of the Vulnerable Software and Affected Versions: Netgear ProSafe Plus JGS516PE version 2.6.0.43 Netgear ProSAFE Plus GS116Ev2 version 2.6.0.43 Description: The issue is related to errors in the authentication procedure of the NSDP protocol implementation. This allows a remote attacker to...

PT-2021-2392

Name of the Vulnerable Software and Affected Versions: Netgear ProSafe Plus JGS516PE version 2.6.0.43 Netgear ProSAFE Plus GS116Ev2 version 2.6.0.43 Description: The issue is related to the implementation of the firmware update mechanism in Netgear devices, which lacks proper input validation. Th...

PT-2021-2434

Name of the Vulnerable Software and Affected Versions: Netgear ProSafe Plus JGS516PE version 2.6.0.43 Netgear ProSAFE Plus GS116Ev2 version 2.6.0.43 Description: The issue is related to insufficient input validation in the web administration panel of the affected devices, which can lead to intege...

PT-2021-11734

Multiple Vulnerabilities in Netgear ProSAFE Plus JGS516PE/GS116Ev2 Switches PoCs https://research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches // - Unauthenticated RCE CVE-2020-26919 - NSDP Authentication Bypass...

PT-2020-5980

Name of the Vulnerable Software and Affected Versions NETGEAR ProSAFE Plus JGS516PE and ProSAFE Plus GS116Ev2 affected versions not specified Description The issue is related to insufficient access control in the TFTP server of the firmware of NETGEAR ProSAFE Plus JGS516PE and ProSAFE Plus GS116E...

NETGEAR ProSAFE Plus Configuration Utility vulnerable to improper access control

Overview ProSAFE Plus Configuration Utility provided by NETGEAR is a Windows application to configure and manage NETGEAR's ProSAFE Plus and Click Switches. An operator uses the utility to login and configure NETGEAR switches. When the utility is invoked, it starts listening on a certain port for...

CVE-2014-4864: Undefined Security Weakness

The NETGEAR ProSafe Plus Configuration Utility creates configuration backup files containing cleartext passwords, which might allow remote attackers to obtain sensitive information by reading a file...

PT-2014-6175

Name of the Vulnerable Software and Affected Versions NETGEAR ProSafe Plus Configuration Utility affected versions not specified Description The issue allows remote attackers to obtain sensitive information by reading a configuration backup file that contains cleartext passwords. Recommendations ...