CVE-2023-49693

NETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire Protocol

CVSS 9.8 CRITICALEPSS 1.2%CWE-306

NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

NETGEAR · NETGEAR ProSAFE Network Management System

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://kb.netgear.com/000065886/Security-Advisory-for-Sensitive-Information-Disclosure-on-the-NMS300-PSV-2023-0126 https://www.tenable.com/security/research/tra-2023-39