CVE-2023-49694 (published 2023-11-29T22:47:42.597Z)



A low-privileged OS user with access to a Windows host where NETGEAR ProSAFE Network Management System is installed can create arbitrary JSP files in a Tomcat web application directory. The user can then execute the JSP files under the security context of SYSTEM.




Affected products: Vendor: NETGEAR
Product: NETGEAR ProSAFE Network Management System
Versions: 0