{"id":"CVE-2016-1524","aliases":[],"url":"https://o3.security/vulnerability/CVE-2016-1524","summary":"Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute arbitrary Java code by using (1) fileUpload.do…","details":"Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute arbitrary Java code by using (1) fileUpload.do or (2) lib-1.0/external/flash/fileUpload.do to upload a JSP file, and then accessing it via a direct request for a /null URI.","published":"2016-02-13T02:59:09.900","modified":"2026-06-17T00:42:07.287","cvss":{"score":9.6,"severity":"CRITICAL","vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"},"epss":{"score":0.94104,"percentile":0.99842,"asOf":"2026-09-13"},"cisaKev":null,"exploitsKnown":2,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"http://packetstormsecurity.com/files/135618/Netgear-Pro-NMS-300-Code-Execution-File-Download.html"},{"type":"WEB","url":"http://seclists.org/fulldisclosure/2016/Feb/30"},{"type":"ADVISORY","url":"http://www.kb.cert.org/vuls/id/777024"},{"type":"WEB","url":"http://www.securityfocus.com/archive/1/537446/100/0/threaded"},{"type":"WEB","url":"https://www.exploit-db.com/exploits/39412/"},{"type":"WEB","url":"http://packetstormsecurity.com/files/135618/Netgear-Pro-NMS-300-Code-Execution-File-Download.html"},{"type":"WEB","url":"http://seclists.org/fulldisclosure/2016/Feb/30"},{"type":"ADVISORY","url":"http://www.kb.cert.org/vuls/id/777024"},{"type":"WEB","url":"http://www.securityfocus.com/archive/1/537446/100/0/threaded"},{"type":"WEB","url":"https://www.exploit-db.com/exploits/39412/"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-06-17T00:42:07.287"}}