This security advisory addresses the following vulnerability IDs: CVE-2016-1524, CVE-2016-1525, and VU#777024.
NETGEAR is aware of a security vulnerability in the NETGEAR Management System (NMS300) Windows network management utility. This vulnerability can allow an unauthenticated attacker to gain access to the NMS300 software to execute commands on any network managed device being managed using Read-Write Simple Network Management Protocol (SNMP) Community or valid authentication credentials configured by the user in the NMS300 software. Authenticated attackers on the local area network can also traverse the file directory and read arbitrary files.
This vulnerability affects the following products:
- NMS300 versions 1.5.0.11 and earlier
The NMS300 software utility works with all ProSAFE products that support SNMP, including many switches, access points, wireless controllers, firewalls, and network storage systems. For a full list of supported devices, see the NMS300 Data Sheet.
NETGEAR has released a fix for this path traversal and command execution vulnerability in version 1.5.0.14 of the NMS300 utility. NETGEAR strongly recommends that all affected users upgrade to the latest version of the NMS300 utility as soon as possible.
To download the latest version of the NMS300 software utility for your NETGEAR Smart or Managed Switch:
- Visit https://www.netgear.com/support/product/NMS300.aspx#download.
- Click the down arrow next to the software release that is appropriate for your Windows system, Win32 or Win64.
- Click Release Notes and follow the instructions in the release notes to download and install the new version of the NMS software utility.
The potential for path traversal and command execution remains if you do not update your NMS300 software utility. NETGEAR is not responsible for any consequences that could have been avoided by updating your software as recommended in this notification.
We appreciate and value having security concerns brought to our attention. NETGEAR constantly monitors for both known and unknown threats. Being pro-active rather than re-active to emerging security issues is fundamental for product support at NETGEAR.
It is NETGEAR's mission to be the innovative leader in connecting the world to the internet. To achieve this mission, we strive to earn and maintain the trust of those that use NETGEAR products for their connectivity.
To report a security vulnerability, visit https://bugcrowd.com/netgear.
If you are a NETGEAR customer with a security-related support concern, you can contact NETGEAR customer support at techsupport.security@netgear.com.
For all other issues, visit http://www.netgear.com/about/security/.