Menu
Serious flaws found in Netgear's NMS300 network management system

Serious flaws found in Netgear's NMS300 network management system

The flaws could lead to remote code execution with system privileges and arbitrary file download

Serious vulnerabilities in the Netgear NMS300 ProSafe network management system, an application used to discover, monitor and configure a wide range of network devices, can allow hackers to take control of the servers it's running on.

The NMS300 can be installed on Windows XP, 7, 8, 10, as well as Windows Server 2003, 2008 and 2012. It allows network administrators to centrally manage network switches, routers, wireless access points, printers, network-attached storage systems, firewall appliances and other devices that support SNMP (Simple Network Management Protocol).

The software is free for managing up to 200 devices and provides an easy-to-use Web graphical interface that can be accessed remotely.

Pedro Ribeiro, a researcher with U.K.-based security consultancy Agile Information Security, found that the Web interface of the Netgear NMS300 allows unauthenticated users to upload and then execute arbitrary Java files. Since the NMS300 software runs under the system account on the underlying OS, the rogue Java code would be executed with system privileges.

Ribeiro also found a second vulnerability that would allow an attacker to force the NMS300 application to load any file from the underlying server and then make it available for download in a predictable location. This means an attacker could read any sensitive file from the server.

Ribeiro reported these issues to Netgear through the CERT Coordination Center at Carnegie Mellon University, which published an advisory about them on Wednesday. The latest NMS300 software, version 1.5.0.11, is affected and there are currently no patches available from Netgear.

CERT/CC recommends that administrators implement firewall rules to restrict access to the application's Web interface. Exposing the NMS300 to the Internet or to untrusted local networks should be avoided, Ribeiro said in an email sent to the Full Disclosure mailing list.

The implications of these vulnerabilities can be very serious because, according to its official specifications, the NMS300 system can modify the configurations of the managed devices and even automatically install firmware updates on them. This means that attackers who compromise the NMS300 application could also potentially compromise some of the devices that it manages or to open up additional holes in the network by modifying their configurations.

Follow Us

Join the New Zealand Reseller News newsletter!

Error: Please check your email address.

Slideshows

Top 50 defining moments of the New Zealand channel in 2016

Top 50 defining moments of the New Zealand channel in 2016

Reseller News looks back on a tumultuous 12 months for the New Zealand channel, assessing the fallout from a year of sizeable industry change. Whether it be local or global mergers and acquisitions, distribution deals or job changes, the channel that started the year differs somewhat to the one set to finish it - Reseller News assesses the key moments that made 2016.​

Top 50 defining moments of the New Zealand channel in 2016
​Hewlett Packard Enterprise honours high achieving NZ channel

​Hewlett Packard Enterprise honours high achieving NZ channel

Hewlett Packard Enterprise honoured its top performing Kiwi partners at the second running of its HPE Partner Awards in New Zealand, held at a glitzy ceremony in Auckland. Recognising excellence across eight categories - from distributors to resellers - the tech giant celebrated its first year as a standalone company, following its official split from HP in 2015.

​Hewlett Packard Enterprise honours high achieving NZ channel
Nutanix treats channel partners to Christmas cruise

Nutanix treats channel partners to Christmas cruise

Nutanix recently took to the seas for a Christmas Cruise around Sydney Harbour with its Australia and New Zealand staff, customers and partners to celebrate a stellar year for the vendor. With the sun out, they were all smiles and mingled over drinks and food.

Nutanix treats channel partners to Christmas cruise
Show Comments