ProSAFE Network Management System vulnerabilities

19 known vulnerabilities in ProSAFE Network Management System from NETGEAR. 19 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

19vulnerabilities

3critical

16high

0exploited

8.8average CVSS score

Latest first

8.8 High severity
ProSAFE Network Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2024-6814Aug 21, 2024NETGEAREPSS 2.09%
NETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentica
8.8 High severity
ProSAFE Network Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2024-6813Aug 21, 2024NETGEAREPSS 1.85%
NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authenticati
8.8 High severity
ProSAFE Network Management System: Improper Limitation of a Pathname to a Restricted Directory
CVE-2024-5505Jun 6, 2024NETGEAREPSS 47%
NETGEAR ProSAFE Network Management System UpLoadServlet Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authen
8.8 High severity
ProSAFE Network Management System: Unrestricted Upload of File with Dangerous Type
CVE-2024-5247May 23, 2024NETGEAREPSS 26.9%
NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. A
7.8 High severity
ProSAFE Network Management System: Use of Default Credentials
CVE-2024-5245May 23, 2024NETGEAR
NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. An attacker must fi
9.6 Critical severity
ProSAFE Network Management System: Improper Neutralization of Input During Web Page Generation
CVE-2023-50231May 3, 2024NETGEAREPSS 53.3%
NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Minimal u
8.8 High severity
ProSAFE Network Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-44450May 3, 2024NETGEAREPSS 53.6%
NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System
8.8 High severity
ProSAFE Network Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-44449May 3, 2024NETGEAREPSS 52.6%
NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Authentication
8.8 High severity
ProSAFE Network Management System: Improper Limitation of a Pathname to a Restricted Directory
CVE-2023-41182May 3, 2024NETGEAREPSS 62.3%
NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although au
8.8 High severity
ProSAFE Network Management System: Missing Authorization
CVE-2023-38102May 3, 2024NETGEAREPSS 1.41%
NETGEAR ProSAFE Network Management System createUser Missing Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Although au
8.8 High severity
ProSAFE Network Management System: Exposed Dangerous Method or Function
CVE-2023-38101May 3, 2024NETGEAREPSS 2.14%
NETGEAR ProSAFE Network Management System SettingConfigController Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Manageme
8.8 High severity
ProSAFE Network Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-38100May 3, 2024NETGEAREPSS 1.42%
NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Although authe
8.8 High severity
ProSAFE Network Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-38099May 3, 2024NETGEAREPSS 56.8%
NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System
8.8 High severity
ProSAFE Network Management System: Unrestricted Upload of File with Dangerous Type
CVE-2023-38098May 3, 2024NETGEAREPSS 12.7%
NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. A
8.8 High severity
ProSAFE Network Management System: Exposed Dangerous Method or Function
CVE-2023-38097May 3, 2024NETGEAREPSS 2.14%
NETGEAR ProSAFE Network Management System BkreProcessThread Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management Sys
9.8 Critical severity
ProSAFE Network Management System: Improper Authentication
CVE-2023-38096May 3, 2024NETGEAREPSS 82%
NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of NETGEAR ProSAFE Network Management System. Authentication is no
8.8 High severity
ProSAFE Network Management System: Unrestricted Upload of File with Dangerous Type
CVE-2023-38095May 3, 2024NETGEAREPSS 65.9%
NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management S
7.8 High severity
NETGEAR ProSAFE Network Management System: Improper Access Control
CVE-2023-49694Nov 29, 2023NETGEAR
A low-privileged OS user with access to a Windows host where NETGEAR ProSAFE Network Management System is installed can create arbitrary JSP files in a Tomcat web application directory. The user can then execute the JSP files under the security context of SYST
9.8 Critical severity
NETGEAR ProSAFE Network Management System: Missing Authentication for Critical Functionality
CVE-2023-49693Nov 29, 2023NETGEAREPSS 1.15%
NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code.