Vulnerabilities for Prosafe network management software 300 (...) - CXSECURITY.COM

Vulnerabilities for
'Prosafe network management software 300'

2016-02-12

CVE-2016-1525

CWE-22

Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allows remote authenticated users to read arbitrary files via a .. (dot dot) in the realName parameter.

CVE-2016-1524

CWE-Other

Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute arbitrary Java code by using (1) fileUpload.do or (2) lib-1.0/external/flash/fileUpload.do to upload a JSP file, and then accessing it via a direct request for a /null URI.

>>> Vendor: Netgear 101 Products

Readynas raidiator

Wndap330 firmware

Prosafe wnap210 firmware

Prosafe wnap210

Prosafe fvs318n

Prosafe gs510tp

Prosafe gs725ts

Prosafe gs728tps

Prosafe gs728ts

Prosafe gs728txs

Prosafe gs752tps

Prosafe gs752txs

Prosafe firmware

Wndr4700 firmware

Gs108pe firmware

Wnr1000v3 firmware

Prosafe netgear management system 300

Prosafe network management software 300

Readynas surveillance

R7100lg firmware

R7300dst firmware

Srx5308 firmware

Fvs318gv2 firmware

Fvs318n firmware

Fvs336gv3 firmware

Arlo base station firmware

Arlo q plus camera firmware

Arlo q camera firmware

Wndr4500 firmware

Dgn2200bv4 firmware

Wndr4000 firmware

D6300b firmware

Ac1450 firmware

Vegn2610 firmware

Wndr3700v3 firmware

Wnr2000v5 firmware

Dgn2200 firmware

Dgn2200 series firmware

Wnap320 firmware

Wndap350 firmware

Wndap360 firmware

Ex7000 firmware

Wndap210v2 firmware

Wndap660 firmware

Wn802tv2 firmware

Wnd930 firmware

Prosafe plus configuration utility

Wnr2000v3 firmware

Wnr2000v4 firmware

Dgnd3700 firmware

Wnr2000 firmware

Readynas os firmware

See all Products for Vendor Netgear

Copyright 2024, cxsecurity.com