CVE-2023-49693

NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code.

Score

CVSS 3.1 9.8 Critical

Status

Modified - vulnreport@tenable.com

Published

2023-11-29

Last modified

2024-08-02

Weaknesses

CWE-306

Affected products

• Netgear Prosafe Network Management System (Netgear)
• Prosafe Network Management System (Netgear)

References

• https://kb.netgear.com/000065886/Security-Advisory-for-Sensitive-Information-Disclosure-on-the-NMS300-PSV-2023-0126
• https://www.tenable.com/security/research/tra-2023-39