CVE-2024-5246

EPSS 75.02%
Published 23.05.2024 22:15:14
Last modified 29.05.2025 20:14:36
Source zdi-disclosures@trendmicro.com
Teams watchlist Login
Open Login

NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit this vulnerability.

The specific flaw exists within the product installer. The issue results from the use of a vulnerable version of Apache Tomcat. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-22868.

Affected products Warnungen 0 Metrics 3 CWE 0 References 5

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD

This information is available to logged-in users.

Data is provided by the National Vulnerability Database (NVD)

Netgear ≫ Prosafe Network Management Software 300 Version1.7.0.37

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	75.02%	0.988

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
zdi-disclosures@trendmicro.com	8.8	2.8	5.9	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

https://kb.netgear.com/000066164/Security-Advisory-for-Multiple-Vulnerabilities-on-the-NMS300-PSV-2024-0003-PSV-2024-0004

Vendor Advisory

https://www.zerodayinitiative.com/advisories/ZDI-24-497/

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-5246

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-5246

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-5246

EUVD