NETGEAR ProSAFE - Authentication Bypass (CVE-2023-38098)
Description
NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of NETGEAR ProSAFE Network Management System. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MyHandlerInterceptor class. The issue results from improper implementation of the authentication mechanism. An attacker can leverage this vulnerability to bypass authentication on the system.
psychologyCrowdSec Analysis
CVE-2023-38098 allows attackers to bypass authentication and upload malicious files to gain SYSTEM-level remote code execution in the NETGEAR ProSAFE Network Management interface.
CrowdSec has been tracking this vulnerability and its exploits since 20th of May 2025.
CrowdSec has not observed any significant exploitation activity targeting CVE-2023-38098 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.
Attackers bypass authentication in UpLoadServlet, upload a malicious JSP, and execute code as SYSTEM—resulting in full remote code execution
Full Intelligence Available
Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.
| Event | Date |
|---|---|
| CVE Published | 2024-05-03 |
| Rule Released | 2025-05-20 |