VYPR

Prosafe Network Management Software 300

by Netgear

CVEs (27)

  • CVE-2023-38096CriMay 3, 2024
    Netgear
    Prosafe Network Management System
    risk 0.73cvss 9.8epss 0.82

    NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of NETGEAR ProSAFE Network Management System. Authentication is not required to…

  • CVE-2016-1524CriFeb 13, 2016
    Netgear
    NMS300
    risk 0.73cvss 9.6epss 0.94

    Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute arbitrary Java code by using (1) fileUpload.do or (2) lib-1.0/external/flash/fileUpload.do to upload a JSP file, and then accessing it via…

  • CVE-2023-50231CriMay 3, 2024
    Netgear
    Prosafe Network Management System
    risk 0.67cvss 9.6epss 0.53

    NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Minimal user interaction is…

  • CVE-2016-1525HigFeb 13, 2016
    Netgear
    Management System NMS300
    risk 0.65cvss 8.6epss 0.75

    Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allows remote authenticated users to read arbitrary files via a .. (dot dot) in the realName parameter.

  • CVE-2023-49693CriNov 29, 2023
    Netgear
    Prosafe Network Management System
    risk 0.64cvss 9.8epss 0.01

    NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code.

  • CVE-2021-27274CriMar 29, 2021
    Netgear
    Prosafe Network Management System
    risk 0.64cvss 9.8epss 0.08

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MFileUploadController class.…

  • CVE-2023-41182HigMay 3, 2024
    Netgear
    Prosafe Network Management System
    risk 0.62cvss 8.8epss 0.59

    NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is…

  • CVE-2023-38095HigMay 3, 2024
    Netgear
    Prosafe Network Management System
    risk 0.62cvss 8.8epss 0.66

    NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although…

  • CVE-2021-27273HigMar 29, 2021
    Netgear
    Prosafe Network Management System
    risk 0.62cvss 8.8epss 0.65

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The…

  • CVE-2024-5505HigJun 6, 2024
    Netgear
    Prosafe Network Management System
    risk 0.61cvss 8.8epss 0.47

    NETGEAR ProSAFE Network Management System UpLoadServlet Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is…

  • CVE-2023-44450HigMay 3, 2024
    Netgear
    Prosafe Network Management System
    risk 0.61cvss 8.8epss 0.54

    NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is…

  • CVE-2023-44449HigMay 3, 2024
    Netgear
    Prosafe Network Management System
    risk 0.61cvss 8.8epss 0.53

    NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to…

  • CVE-2023-38099HigMay 3, 2024
    Netgear
    Prosafe Network Management System
    risk 0.61cvss 8.8epss 0.57

    NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although…

  • CVE-2023-38098HigMay 3, 2024
    Netgear
    Prosafe Network Management System
    risk 0.61cvss 8.8epss 0.13

    NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although…

  • CVE-2024-5246HigMay 23, 2024
    Netgear
    Prosafe Network Management System
    risk 0.60cvss 8.8epss 0.31

    NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit this…

  • CVE-2021-27275HigMar 29, 2021
    Netgear
    Prosafe Network Management System
    risk 0.60cvss 8.3epss 0.73

    This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication…

  • CVE-2024-5247HigMay 23, 2024
    Netgear
    Prosafe Network Management System
    risk 0.59cvss 8.8epss 0.27

    NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is…

  • CVE-2024-6814HigAug 21, 2024
    Netgear
    Prosafe Network Management System
    risk 0.57cvss 8.8epss 0.02

    NETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to…

  • CVE-2024-6813HigAug 21, 2024
    Netgear
    Prosafe Network Management System
    risk 0.57cvss 8.8epss 0.02

    NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to…

  • CVE-2023-38102HigMay 3, 2024
    Netgear
    Prosafe Network Management System
    risk 0.57cvss 8.8epss 0.01

    NETGEAR ProSAFE Network Management System createUser Missing Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is…

Page 1 of 2