漏洞描述
NETGEAR ProSAFE Plus before 2.6.0.43 is susceptible to unauthenticated remote code execution. Any HTML page is allowed as a valid endpoint to submit POST requests, allowing debug action via the submitId and debugCmd parameters. The problem is publicly exposed in the login.html webpage, which has to be publicly available to perform login requests but does not implement any restriction for executing debug actions. This will allow attackers to execute system commands.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
research.nccgroup.comhttps://research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches/↗unit42.paloaltonetworks.comhttps://unit42.paloaltonetworks.com/mirai-variant-iot-vulnerabilities/↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2020-26919↗kb.netgear.comhttps://kb.netgear.com/000062334/Security-Advisory-for-Missing-Function-Level-Access-Control-on-JGS516PE-PSV-2020-0377↗github.comhttps://github.com/ARPSyndicate/kenzer-templates↗