CoreCVE
Back

CRITICAL

NETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire Protocol

Published Nov 29, 2023

Description

NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code.

Affected products

Remediation

Vendor solution

The issue has been fixed in NMS300 version 1.7.0.31

Weaknesses (1)

CWE-306

Missing Authentication

References (3)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner tenable
Published Nov 29, 2023
Updated Aug 2, 2024
Reserved Nov 29, 2023
Link CVE-2023-49693

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2023-49693

Red Hat

No data

ENISA EUVD

Assigner tenable
Published Nov 29, 2023
Updated Aug 2, 2024
Link EUVD-2023-53627

GitHub

No data