Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-49694

NETGEAR ProSAFE Network Management System Privilege Escalation Via MySQL Server

Description

A low-privileged OS user with access to a Windows host where NETGEAR ProSAFE Network Management System is installed can create arbitrary JSP files in a Tomcat web application directory. The user can then execute the JSP files under the security context of SYSTEM.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NETGEAR NETGEAR ProSAFE Network Management System

Default version status: unaffected

  • 0 to < 1.7.0.34affected

References