Description
Netgear ProSAFE NMS存在任意文件上传漏洞，该漏洞是由于MfileUpload.do接口对用户的请求检验不当造成的。
Netgear ProSAFE NMS CVE-2023-38095 任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-38095
https://www.zerodayinitiative.com/advisories/ZDI-23-921/
https://github.com/advisories/GHSA-v2fh-w9pr-6754
https://kb.netgear.com/000065707/Security-Advisory-for-Multiple-Vulnerabilities-on-the-ProSAFE-Network-Management-System-PSV-2023-0024-PSV-2023-0025
https://www.cnvd.org.cn/flaw/show/CNVD-2024-33897
https://www.nsfocus.net/vulndb/98635
https://dbugs.ptsecurity.com/vulnerability/PT-2023-3789
https://www.tenable.com/plugins/nessus/181469
https://update.nsfocusglobal.com/update/listNewipsDetail/v/rule5.6.11
https://advisories.checkpoint.com/defense/advisories/public/2025/cpai-2023-2323.html
https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.HTTP:CTS:NETGEAR-NMS300-FUPLD.html
https://www.snort.org/rule_docs/1-66488
https://docs.sophos.com/releasenotes/output/en-us/nsg/IPSReleaseNotes/7.21.16_s.pdf
https://1275.ru/cve/cve-2023-38095-chtenie-lokalnyh-faylov-v-netgear-nms300_4892
https://support.trellix.com/s/article/000013921