Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-49693

NETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire Protocol

Description

NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NETGEAR NETGEAR ProSAFE Network Management System

Default version status: unaffected

  • 0 to < 1.7.0.34affected

References