ZDI-CAN-19724: ZDI-23-916: NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability
This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-19724?
ZDI-CAN-19724 is rated as a high-severity vulnerability due to the potential for privilege escalation.
How do I fix ZDI-CAN-19724?
To fix ZDI-CAN-19724, update the NETGEAR ProSAFE Network Management System to the latest patched version provided by NETGEAR.
Who is affected by ZDI-CAN-19724?
The vulnerability affects users of the NETGEAR ProSAFE Network Management System with installations at risk of exploit.
Can ZDI-CAN-19724 be exploited without authentication?
Although authentication is required, the vulnerability allows the existing authentication mechanism to be bypassed, making it exploitable.
What impact does ZDI-CAN-19724 have on security?
ZDI-CAN-19724 can lead to unauthorized privilege escalation, compromising the integrity and security of affected systems.