virus logo Intrusion Prevention

NETGEAR.ProSAFE.login_handler.Remote.Command.Execution

description-logoDescription

This indicates a detection of a Command Injection vulnerability in Netgear ProSAFE Products.
The vulnerability is due to an error in the application when handling a crafted HTTP request. It may allow remote attackers to execute arbitrary code on vulnerable systems, via a crafted HTTP request.

affected-products-logoAffected Products

Netgear ProSAFE WC9500
Netgear ProSafe WC7600
Netgear ProSafe WC7520

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Currently we are unaware of any vendor supplied patch for this issue

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Detail
2023-08-10 25.619 Name:Netgear.
ProSAFE.
login_handler.
Remote.
Command.
Execution:NETGEAR.
ProSAFE.
login_handler.
Remote.
Command.
Execution

References

http://firmware.re/vulns/acsa-2015-002.php
ID 44973
Created Jan 10, 2018
Updated Aug 09, 2023
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon
CVE ID
Default Action drop
Active
Affected OS Linux
Affected App PHP_app