Netis Systems vulnerabilities

51 vulnerabilities

Known vulnerabilities in Netis Systems products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 14 products.

Products

14
PrioritiseCVE-2025-50635netis-systems · wf2780_firmwarenetis-systems wf2780_firmwareA null pointer dereference vulnerability was discovered in Netis WF2780 v2.2.35445. The vulnerability exists in the FUN_0048a728 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the CONTENT_LENGTH variable, causing the program to crash and potentially leading to a denial-of-service (DoS) attack.CVSS7.5HighEPSS0.44%PrioritiseCVE-2025-50617netis-systems · wf2880_firmwarenetis-systems wf2880_firmwareA buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_0046ed68 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wps_set in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack.CVSS7.5HighEPSS0.43%PrioritiseCVE-2025-50616netis-systems · wf2880_firmwarenetis-systems wf2880_firmwareA buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_0046f984 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_advanced_set in the payload, which can cause the program to crash and lead to a Denial of Service (DoS) attack.CVSS7.5HighEPSS0.43%PrioritiseCVE-2025-50615netis-systems · wf2880_firmwarenetis-systems wf2880_firmwareA buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00470c50 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_mac_filter_set in the payload, which can cause the program to crash and lead to a Denial of Service (DoS) attack.CVSS7.5HighEPSS0.43%PrioritiseCVE-2025-50614netis-systems · wf2880_firmwarenetis-systems wf2880_firmwareA buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the FUN_0047151c function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wds_set in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack.CVSS7.5HighEPSS0.43%PrioritiseCVE-2025-50613netis-systems · wf2880_firmwarenetis-systems wf2880_firmwareA buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00475e1c function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wds_key_wep in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack.CVSS7.5HighEPSS0.43%PrioritiseCVE-2025-50612netis-systems · wf2880_firmwarenetis-systems wf2880_firmwareA buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the FUN_004743f8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_sec_set in the payload, which may cause the program to crash and potentially lead to a Denial of Service (DoS) attack.CVSS7.5HighEPSS0.43%PrioritiseCVE-2025-50611netis-systems · wf2880_firmwarenetis-systems wf2880_firmwareA buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00473154 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_sec_set_5g and wl_sec_rp_set_5g in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack.CVSS7.5HighEPSS0.43%PrioritiseCVE-2025-50610netis-systems · wf2880_firmwarenetis-systems wf2880_firmwareA buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00476598 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_base_set_5g in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack.CVSS7.5HighEPSS0.45%PrioritiseCVE-2025-50609netis-systems · wf2880_firmwarenetis-systems wf2880_firmwareA buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the Function_00465620 of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of specify_parame in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack.CVSS7.5HighEPSS0.43%PrioritiseCVE-2025-50608netis-systems · wf2880_firmwarenetis-systems wf2880_firmwareA buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00471994 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_base_set in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack.CVSS7.5HighEPSS0.45%PrioritiseCVE-2025-45835netis-systems · wf2880_firmwarenetis-systems wf2880_firmwareA null pointer dereference vulnerability was discovered in Netis WF2880 v2.1.40207. The vulnerability exists in the FUN_004904c8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the environment variable value CONTENT_LENGTH, causing the program to crash and potentially leading to a denial-of-service (DoS) attack.CVSS7.5HighEPSS0.49%RoutineCVE-2025-2921netis · wf-2404 +1 moreNetis WF-2404 passwd default passwordA vulnerability classified as critical has been found in Netis WF-2404 1.1.124EN. Affected is an unknown function of the file /etc/passwd. The manipulation with the input Realtek leads to use of default password. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.CVSS6.4MediumEPSS0.36%PrioritiseCVE-2025-2919netis · wf-2404 +1 moreNetis WF-2404 UART hardware allows activation of test or debug logic at runtimeA vulnerability was found in Netis WF-2404 1.1.124EN. It has been declared as critical. This vulnerability affects unknown code of the component UART. The manipulation leads to hardware allows activation of test or debug logic at runtime. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.CVSS7.2HighEPSS0.38%RoutineCVE-2024-33793netis-systems · mex605_firmwarenetis-systems mex605_firmwarenetis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the ping test page.CVSS5.3MediumEPSS0.31%PrioritiseCVE-2024-33792netis-systems · mex605_firmwarenetis-systems mex605_firmwarenetis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the tracert page.CVSS9.8CriticalEPSS0.97%RoutineCVE-2024-33791netis-systems · mex605_firmwarenetis-systems mex605_firmwareA cross-site scripting (XSS) vulnerability in netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the getTimeZone function.CVSS4.6MediumEPSS0.39%PrioritiseCVE-2024-25851netis-systems · wf2780_firmwarenetis-systems wf2780_firmwareNetis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the config_sequence parameter in other_para of cgitest.cgi.CVSS8.0HighEPSS1.94%PrioritiseCVE-2024-25850netis-systems · wf2780_firmwarenetis-systems wf2780_firmwareNetis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the wps_ap_ssid5g parameterCVSS9.8CriticalEPSS19.07%PrioritiseCVE-2024-22729netis-systems · mw5360_firmwarenetis-systems mw5360_firmwareNETIS SYSTEMS MW5360 V1.0.1.3031 was discovered to contain a command injection vulnerability via the password parameter on the login page.CVSS9.8CriticalEPSS70.78%