NETGEAR Prosafe Network Management Software 300 vulnerabilities

3 CVEs affecting NETGEAR Prosafe Network Management Software 300, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-5246, published 2024-05-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-1524, published 2016-02-13. Critical severity, CVSS 9.6. EPSS: 94.1% chance of exploitation in the next 30 days. Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute arbitrary Java code by using (1) fileUpload.do or (2)…
CVE-2016-1525, published 2016-02-13. High severity, CVSS 8.6. EPSS: 75% chance of exploitation in the next 30 days. Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allows remote authenticated users to read arbitrary files via a .. (dot dot) in the…
CVE-2024-5246, published 2024-05-23. High severity, CVSS 8.8. EPSS: 31.3% chance of exploitation in the next 30 days. NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE…