NETGEAR Prosafe Network Management System vulnerabilities

24 CVEs affecting NETGEAR Prosafe Network Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-6814, published 2024-08-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-38096, published 2024-05-03. Critical severity, CVSS 9.8. EPSS: 82% chance of exploitation in the next 30 days. NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of…
CVE-2021-27272, published 2021-03-29. High severity, CVSS 7.1. EPSS: 73.8% chance of exploitation in the next 30 days. This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit…
CVE-2021-27275, published 2021-03-29. High severity, CVSS 8.3. EPSS: 73.3% chance of exploitation in the next 30 days. This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although…
CVE-2021-27276, published 2021-03-29. High severity, CVSS 7.1. EPSS: 72.5% chance of exploitation in the next 30 days. This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit…
CVE-2023-38095, published 2024-05-03. High severity, CVSS 8.8. EPSS: 65.5% chance of exploitation in the next 30 days. NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
CVE-2021-27273, published 2021-03-29. High severity, CVSS 8.8. EPSS: 65% chance of exploitation in the next 30 days. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit…
CVE-2023-41182, published 2024-05-03. High severity, CVSS 8.8. EPSS: 62.3% chance of exploitation in the next 30 days. NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected…
CVE-2023-38099, published 2024-05-03. High severity, CVSS 8.8. EPSS: 56.8% chance of exploitation in the next 30 days. NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
CVE-2023-44450, published 2024-05-03. High severity, CVSS 8.8. EPSS: 53.6% chance of exploitation in the next 30 days. NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
CVE-2023-50231, published 2024-05-03. Critical severity, CVSS 9.6. EPSS: 53.3% chance of exploitation in the next 30 days. NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected…

Latest

CVE-2024-6814, published 2024-08-21. High severity, CVSS 8.8. EPSS: 2.1% chance of exploitation in the next 30 days. NETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected…
CVE-2024-6813, published 2024-08-21. High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days. NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected…
CVE-2024-5505, published 2024-06-06. High severity, CVSS 8.8. EPSS: 47% chance of exploitation in the next 30 days. NETGEAR ProSAFE Network Management System UpLoadServlet Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected…
CVE-2024-5247, published 2024-05-23. High severity, CVSS 8.8. EPSS: 26.9% chance of exploitation in the next 30 days. NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected…
CVE-2024-5245, published 2024-05-23. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of…
CVE-2023-44449, published 2024-05-03. High severity, CVSS 8.8. EPSS: 52.6% chance of exploitation in the next 30 days. NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations…
CVE-2023-38102, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. NETGEAR ProSAFE Network Management System createUser Missing Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected…