NETGEAR ProSAFE Network Management System SettingConfigController Exposed Dangerous Function Remote Code Execution Vulnerability

CVE-2023-38101

What is CVE-2023-38101?

The vulnerability within the NETGEAR ProSAFE Network Management System's SettingConfigController allows remote attackers to execute arbitrary code due to an exposed dangerous function. Although exploitation requires authentication, the vulnerability enables attackers to bypass the existing authentication mechanisms. This flaw allows code execution in the context of SYSTEM, potentially leading to severe security implications for affected installations. Organizations using this management system should review the advisory for mitigations and updates to address this significant security concern.

References