Netgear Vulnerabilities Lead to Credentials Leak, Privilege Escalation

Vulnerabilities in Netgear's NMS300 ProSAFE network management system allow attackers to retrieve cleartext credentials and escalate privileges, cybersecurity firm Flashpoint reports.The tool provides users with a web-based interface for network device management.It uses TCP port 8080 for communication and supports administrator accounts and lower-privileged operator and observer account roles.

Read at SecurityWeek