Netgear ProSAFE NMS300 Routers SQL Injection (CVE-2023-44449)

Related Vulnerabilities: CVE-2023-44449  

Check Point Reference: CPAI-2023-1356 Date Published: 10 Dec 2023 Severity: Medium Last Updated: Sunday 10 December, 2023 Source: Industry Reference:CVE-2023-44449
Protection Provided by:

Security Gateway
R81, R80, R77, R75

Who is Vulnerable? Netgear ProSAFE NMS300 prior to 1.7.0.31 Vulnerability Description An SQL injection vulnerability exists in Netgear ProSAFE NMS300. This vulnerability is due to improper input validation in the clearAlertByIds function.Successfully exploiting this vulnerability could result in SQL injection.