Beveiligingsadvies

CVE-2016-1524

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2016-02-13 02:00:00

Laatst bijgewerkt 2024-08-05 23:02:11

Toegewezen door certcc

CVSS-score geen score

Status PUBLISHED

Beschrijving

Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute arbitrary Java code by using (1) fileUpload.do or (2) lib-1.0/external/flash/fileUpload.do to upload a JSP file, and then accessing it via a direct request for a /null URI.

← Alle CVE's bekijken Bekijk op cve.org ↗