CVE-2023-38096
Last modified
CVE-2023-38096 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of NETGEAR ProSAFE Network Management System. EPSS estimates a 83.01% chance of exploitation in the next 30 days.
Description
NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of NETGEAR ProSAFE Network Management System. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MyHandlerInterceptor class. The issue results from improper implementation of the authentication mechanism. An attacker can leverage this vulnerability to bypass authentication on the system. . Was ZDI-CAN-19718.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Netgear | Prosafe Network Management System | < 1.7.0.20 |
References
- https://www.zerodayinitiative.com/advisories/ZDI-23-920/Third Party Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-23-920/Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2023-38096?
How severe is CVE-2023-38096?
How do I fix CVE-2023-38096?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-38090Kofax Power PDF popUpMenu Heap-based Buffer Overflow Remote …7.8
- CVE-2023-38091Kofax Power PDF response Type Confusion Remote Code Executio…7.8
- CVE-2023-38092Kofax Power PDF importDataObject Stack-based Buffer Overflow…7.8
- CVE-2023-38093Kofax Power PDF saveAs Stack-based Buffer Overflow Remote Co…7.8
- CVE-2023-38094Kofax Power PDF replacePages Stack-based Buffer Overflow Rem…7.8
- CVE-2023-38095NETGEAR ProSAFE Network Management System MFileUploadControl…8.8
- CVE-2023-38097NETGEAR ProSAFE Network Management System BkreProcessThread …8.8
- CVE-2023-38098NETGEAR ProSAFE Network Management System UpLoadServlet Unre…8.8
- CVE-2023-38099NETGEAR ProSAFE Network Management System getNodesByTopology…8.8
- CVE-2023-3810A vulnerability was found in Hospital Management System 1.0.…9.8
- CVE-2023-38100NETGEAR ProSAFE Network Management System clearAlertByIds SQ…8.8
- CVE-2023-38101NETGEAR ProSAFE Network Management System SettingConfigContr…8.8
Are you affected by CVE-2023-38096?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
