NETGEAR ProSAFE Network Management System Privilege Escalation Via MySQL Server

CVE-2023-49694

What is CVE-2023-49694?

A vulnerability exists in the NETGEAR ProSAFE Network Management System, where a low-privileged OS user can gain unauthorized access and create arbitrary JSP files within the Tomcat web application directory. This allows the malicious user to execute these JSP files with the security privileges of the SYSTEM account, potentially leading to further exploitation of the system.

References