HTTP: Netgear ProSAFE NMS300 MFileUploadController Unrestricted File Upload

This signature detects attempts to exploit a known vulnerability against Netgear ProSAFE NMS300. A successful attack can lead to arbitrary code execution.

Extended Description

NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit this vulnerability. The specific flaw exists within the UpLoadServlet class. The issue results from the lack of proper validation of user-supplied data, which can allow the upload of arbitrary files. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-22923.

Affected Products

Netgear prosafe_network_management_system

References

CVE: CVE-2024-5247

URL: http://www.zerodayinitiative.com/advisories/ZDI-21-357/ https://kb.netgear.com/000062688/Security-Advisory-for-Pre-Authentication-Command-Injection-on-NMS300-PSV-2020-0560 http://www.zerodayinitiative.com/advisories/ZDI-23-918/ https://kb.netgear.com/000065707/Security-Advisory-for-Multiple-Vulnerabilities-on-the-ProSAFE-Network-Management-System-PSV-2023-0024-PSV-2023-0025 http://www.zerodayinitiative.com/advisories/ZDI-21-358/ http://www.zerodayinitiative.com/advisories/ZDI-23-921/ https://kb.netgear.com/000066165/Security-Advisory-for-Missing-Function-Level-Access-Control-on-the-NMS300-PSV-2024-0005

Short Name

HTTP:CTS:NETGEAR-NMS300-FUPLD

Severity

Critical

Recommended

False

Recommended Action

Drop

HTTP: Netgear ProSAFE NMS300 MFileUploadController Unrestricted File Upload

Extended Description

Affected Products

References

Found a potential security threat?