Netgear

Prosafe Network Management System

25 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2023-38102

  • EPSS 0.35%
  • Veröffentlicht 03.05.2024 02:15:53
  • Zuletzt bearbeitet 06.02.2025 18:00:50

NETGEAR ProSAFE Network Management System createUser Missing Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. A...

8.8

CVE-2023-38100

  • EPSS 0.11%
  • Veröffentlicht 03.05.2024 02:15:52
  • Zuletzt bearbeitet 06.02.2025 18:01:21

NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Alth...

8.8

CVE-2023-38101

  • EPSS 5.7%
  • Veröffentlicht 03.05.2024 02:15:52
  • Zuletzt bearbeitet 06.02.2025 18:01:03

NETGEAR ProSAFE Network Management System SettingConfigController Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Networ...

8.8

CVE-2023-38099

  • EPSS 0.84%
  • Veröffentlicht 03.05.2024 02:15:52
  • Zuletzt bearbeitet 06.02.2025 18:01:12

NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Managem...

8.8

CVE-2023-38098

  • EPSS 75.91%
  • Veröffentlicht 03.05.2024 02:15:52
  • Zuletzt bearbeitet 06.02.2025 18:01:42

NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management...

8.8

CVE-2023-38097

  • EPSS 4.28%
  • Veröffentlicht 03.05.2024 02:15:52
  • Zuletzt bearbeitet 06.02.2025 18:01:59

NETGEAR ProSAFE Network Management System BkreProcessThread Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Mana...

9.8

CVE-2023-38096

  • EPSS 74.93%
  • Veröffentlicht 03.05.2024 02:15:52
  • Zuletzt bearbeitet 06.02.2025 18:01:32

NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of NETGEAR ProSAFE Network Management System. Authentica...

8.8

CVE-2023-38095

  • EPSS 7.89%
  • Veröffentlicht 03.05.2024 02:15:51
  • Zuletzt bearbeitet 06.02.2025 18:01:51

NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Ma...

7.8

CVE-2023-49694

Exploit
  • EPSS 0.09%
  • Veröffentlicht 29.11.2023 23:15:20
  • Zuletzt bearbeitet 21.11.2024 08:33:42

A low-privileged OS user with access to a Windows host where NETGEAR ProSAFE Network Management System is installed can create arbitrary JSP files in a Tomcat web application directory. The user can then execute the JSP files under the security co...

9.8

CVE-2023-49693

Exploit
  • EPSS 0.72%
  • Veröffentlicht 29.11.2023 23:15:20
  • Zuletzt bearbeitet 21.11.2024 08:33:42

NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code.