CVE-2024-5246CWE-1395

NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerability

High · published May 23, 2024

CVSS v3.0
8.8
EPSS
31%
Percentile
98.3
In the wild
Unconfirmed
What it is

NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit this vulnerability.

The specific flaw exists within the product installer. The issue results from the use of a vulnerable version of Apache Tomcat. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-22868.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.31305 · 98.3th percentile
Weakness
CWE-1395 · Dependency on Vulnerable Third-Party Component
Published
2024-05-23T22:07Z
EPSS history
Timeline
  • 23 MAY 22:07Z
    NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerability
    cvelistv5