NSRW vulnerabilities

2 known vulnerabilities in NSRW from NetModule. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  NSRW: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-0862Feb 16, 2023NetModuleEPSS 2.35%

  The NetModule NSRW web administration interface is vulnerable to path traversals, which could lead to arbitrary file uploads and deletion. By uploading malicious files to the web root directory, authenticated users could gain remote command execution with elev

• 8.8 High severity

  NSRW: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-0861Feb 16, 2023NetModuleEPSS 28.7%

  NetModule NSRW web administration interface executes an OS command constructed with unsanitized user input. A successful exploit could allow an authenticated user to execute arbitrary commands with elevated privileges. This issue affects NSRW: from 4.3.0.0 bef