CVE-2016-1524 Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute arbitrary Java code by using (1) fileUpload.do or (2) lib-1...
CriticalCVSS 9.6
EPSS 94.1%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute arbitrary Java code by using (1) fileUpload.do or (2) lib-1.0/external/flash/fileUpload.do to upload a JSP file, and then accessing it via a direct request for a /null URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netgear prosafe network management software 300 | <= 1.5.0.11 | No fix listed |
References
- packetstormsecurity.com
- 20160204 [CERT 777024 / CVE-2016-1524/5]: RCE and file download in Netgear NMS300 mailing-list
- VU#777024 third-party-advisory us-government-resource
- 20160204 [CERT 777024 / CVE-2016-1524/5]: RCE and file download in Netgear NMS300 mailing-list
- 39412 exploit