cve/2023/CVE-2023-49693.md

CVE-2023-49693

Description

NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code.

POC

Reference

• https://kb.netgear.com/000065886/Security-Advisory-for-Sensitive-Information-Disclosure-on-the-NMS300-PSV-2023-0126
• https://www.tenable.com/security/research/tra-2023-39

Github

No PoCs found on GitHub currently.