CVE-2016-1524 File upload in n/a
Remote attackers can upload malicious JSP files to NETGEAR NMS300 to execute arbitrary Java code via unrestricted file upload vulnerabilities.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-1524?
CVE-2016-1524 is a critical vulnerability in n/a, published on 13 Feb 2016. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute arbitrary Java code by using (1) fileUpload.do or (2) lib-1.0/external/flash/fileUpload.do to upload a JSP file, and then accessing it via a direct request for a /null URI.
Which versions are affected by CVE-2016-1524?
It affects 1 product.
Products include Netgear Prosafe Network Management Software 300.
How do I fix CVE-2016-1524?
No fix has been published for CVE-2016-1524 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-1524 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2016-1524 exists.
Public exploit code: 1 Metasploit module and 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-wmmq-22w7-cvf3.