← voltar
CVE-2023-49693

NETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire Protocol

CVSS 9.8 CRITICALEPSS 1.2%CWE-306
NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
NETGEAR · NETGEAR ProSAFE Network Management System

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://kb.netgear.com/000065886/Security-Advisory-for-Sensitive-Information-Disclosure-on-the-NMS300-PSV-2023-0126https://www.tenable.com/security/research/tra-2023-39