CVE-2023-49693

NETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire Protocol

NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code.

Affected

NETGEAR · NETGEAR ProSAFE Network Management System

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

1.15% chance of exploitation in the next 30 days, 67th percentile

Published

2023-11-29

Updated

2024-08-02

Proof-of-concept exploits (1)

• https://www.tenable.com/security/research/tra-2023-39

Security advisories

• https://kb.netgear.com/000065886/Security-Advisory-for-Sensitive-Information-Disclosure-o…

References

• CVE Record
• NVD entry