CVE-2016-1525

—

CVSS 3.0

8.6 high

EPSS

75%p99

Published

Feb 13, 2016 (Feb 13, 2016)

Modified

Jun 17, 2026

Description

Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allows remote authenticated users to read arbitrary files via a .. (dot dot) in the realName parameter.

Vendors: netgear
Products: prosafe network management software 300
Weakness: CWE-22
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (75.0%)

In the news0 stories

No ingested article mentions this CVE yet.