Approved changes feed: RSS · Atom

cpe:2.3:a:netgear:netgear_prosafe_network_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNetgear (99700297-c207-56f4-abd0-97ab0c8bf3ab)
ProductNetgear Prosafe Network Management System (44f70896-3584-5320-8343-1d12e9924346)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-49694 vulnerable 2026-06-08 06:16:10.242707 NETGEAR ProSAFE Network Management System Privilege Escalation Via MySQL Server
HIGH (7.8)
A low-privileged OS user with access to a Windows host where NETGEAR ProSAFE Network Management System is installed can create arbitrary JSP files in a Tomcat web application directory. The user can then execute the JSP files under the security context of SYSTEM.
Published: 2023-11-29T22:47:42.597Z
Updated: 2024-08-02T22:01:25.766Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49693 vulnerable 2026-06-08 06:16:10.240966 NETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire Protocol
CRITICAL (9.8)
NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code.
Published: 2023-11-29T22:41:02.567Z
Updated: 2024-08-02T22:01:25.966Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.