Remote Code Execution in NetGain Systems Enterprise Manager by Authentication Bypass

CVE-2017-16598

What is CVE-2017-16598?

This flaw in NetGain Systems Enterprise Manager allows remote attackers to execute arbitrary code by overwriting files due to improper validation of user-supplied input. Despite requiring authentication, an attacker can bypass this security check. The specific vulnerability is within the snmpwalk servlet, which processes the 'ip' parameter without sufficient checks prior to file operations. Exploiting this weakness enables code execution with Administrator privileges, potentially compromising the integrity of the system.

References