{"uuid": "33d750ce-abbb-483b-aca9-db8bb6984f55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-1524", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/netgear_auth_download.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Pedro Ribeiro \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"Netgear's ProSafe NMS300 is a network management utility that runs on Windows systems.\\n          The application has a file download vulnerability that can be exploited by an\\n          authenticated remote attacker to download any file in the system.\\n          This module has been tested with versions 1.5.0.2, 1.4.0.17 and 1.1.0.13.\", \"disclosure_date\": \"2016-02-04\", \"fullname\": \"auxiliary/admin/http/netgear_auth_download\", \"is_install_path\": true, \"mod_time\": \"2025-05-16 01:16:37 +0000\", \"name\": \"NETGEAR ProSafe Network Management System 300 Authenticated File Download\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/http/netgear_auth_download.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"admin/http/netgear_auth_download\", \"references\": [\"CVE-2016-1524\", \"US-CERT-VU-777024\", \"URL-https://raw.githubusercontent.com/pedrib/PoC/master/advisories/netgear_nms_rce.txt\", \"URL-https://seclists.org/fulldisclosure/2016/Feb/30\"], \"rport\": 8080, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:48.158956Z"}