Paper/Archive/CVE-2023-38096

CVE-2023-38096

NETGEAR ProSAFE Network Management System — NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability

EPSS 82%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 99.7.997 × 2019.9 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of NETGEAR ProSAFE Network Management System. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MyHandlerInterceptor class. The issue results from improper implementation of the authentication mechanism. An attacker can leverage this vulnerability to bypass authentication on the system. . Was ZDI-CAN-19718.

Affected

ProductAffectedFixed inSource

ProSAFE Network Management System1.7.0.12 (Win64)–CNA

prosafe_network_management_system< 1.7.0.201.7.0.20CISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

zdi (CNA)9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refzerodayinitiative.com/advisories/ZDI-23-920 advisorykb.netgear.com/000065707/Security-Advisory-for-Multiple-Vulnerabilities-on-the-ProSAFE-Network-Management-System-PSV-2023-0024-PSV-2023-0025