Remote Code Execution Vulnerability in NETGEAR ProSAFE Network Management System

CVE-2021-27274

Summary

The NETGEAR ProSAFE Network Management System is susceptible to a vulnerability that enables remote attackers to execute arbitrary code. This flaw arises from the inadequate validation of user-supplied paths in the MFileUploadController class, allowing an attacker to manipulate file operations without the need for authentication. Successful exploitation can lead to arbitrary code execution in the context of the SYSTEM user, potentially compromising the entire system.

References