NETGEAR ProSAFE Network Management System vulnerabilities

2 known vulnerabilities in NETGEAR ProSAFE Network Management System from NETGEAR. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  NETGEAR ProSAFE Network Management System: Improper Access Control

  CVE-2023-49694Nov 29, 2023NETGEAR

  A low-privileged OS user with access to a Windows host where NETGEAR ProSAFE Network Management System is installed can create arbitrary JSP files in a Tomcat web application directory. The user can then execute the JSP files under the security context of SYST

• 9.8 Critical severity

  NETGEAR ProSAFE Network Management System: Missing Authentication for Critical Functionality

  CVE-2023-49693Nov 29, 2023NETGEAREPSS 1.15%

  NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code.