Remote Code Execution Vulnerability in NetGain Systems Enterprise Manager

CVE-2017-16603

What is CVE-2017-16603?

This vulnerability stems from a flaw in the file upload process of NetGain Systems Enterprise Manager, specifically within the handling of the filename parameter. An attacker, even after authentication, can bypass the authentication controls and upload arbitrary files through the servlet that listens on TCP port 8081 by default. Once the files are uploaded, they can execute code with Administrator privileges, leading to a significant security risk for affected installations.

References