CVE-2016-1525

This Metasploit module exploits an arbitrary file upload vulnerability in NETGEAR ProSafe NMS300, allowing unauthenticated remote code execution as SYSTEM via a malicious JSP payload.

This exploit demonstrates an unauthenticated arbitrary file upload vulnerability (CVE-2016-1525) in NETGEAR ProSafe NMS300, allowing remote code execution as SYSTEM via JSP upload. It also details an authenticated arbitrary file download vulnerability (CVE-2016-1524) using path traversal.

This Metasploit module exploits an authentication bypass and arbitrary file upload vulnerability in NETGEAR ProSafe NMS300 to achieve remote code execution as SYSTEM. It uploads a malicious JSP file containing a base64-encoded payload, then triggers execution via a GET request.