Netis Systems N3M vulnerabilities
10 vulnerabilities
Known vulnerabilities in Netis Systems N3M, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
PrioritiseCVE-2023-45468netis-systems · n3m_firmwarenetis-systems n3m_firmwareNetis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the pingWdogIp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVSS7.5HighEPSS0.81%PrioritiseCVE-2023-45467netis-systems · n3m_firmwarenetis-systems n3m_firmwareNetis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ntpServIP parameter in the Time Settings.CVSS9.8CriticalEPSS2.22%PrioritiseCVE-2023-45465netis-systems · n3m_firmwarenetis-systems n3m_firmwareNetis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ddnsDomainName parameter in the Dynamic DNS settings.CVSS9.8CriticalEPSS2.15%PrioritiseCVE-2023-45464netis-systems · n3m_firmwarenetis-systems n3m_firmwareNetis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the servDomain parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVSS7.5HighEPSS0.74%PrioritiseCVE-2023-45463netis-systems · n3m_firmwarenetis-systems n3m_firmwareNetis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the hostName parameter in the FUN_0040dabc function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVSS7.5HighEPSS0.74%PrioritiseCVE-2023-44860netis-systems · n3m_firmwarenetis-systems n3m_firmwareAn issue in NETIS SYSTEMS N3Mv2 v.1.0.1.865 allows a remote attacker to cause a denial of service via the authorization component in the HTTP request.CVSS7.5HighEPSS22.71%PrioritiseCVE-2023-43893netis-systems · n3m_firmwarenetis-systems n3m_firmwareNetis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the wakeup_mac parameter in the Wake-On-LAN (WoL) function. This vulnerability is exploited via a crafted payload.CVSS9.8CriticalEPSS2.24%PrioritiseCVE-2023-43892netis-systems · n3m_firmwarenetis-systems n3m_firmwareNetis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the WAN settings. This vulnerability is exploited via a crafted payload.CVSS9.8CriticalEPSS2.24%PrioritiseCVE-2023-43891netis-systems · n3m_firmwarenetis-systems n3m_firmwareNetis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the Changing Username and Password function. This vulnerability is exploited via a crafted payload.CVSS9.8CriticalEPSS2.24%PrioritiseCVE-2023-43890netis-systems · n3m_firmwarenetis-systems n3m_firmwareNetis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the diagnostic tools page. This vulnerability is exploited via a crafted HTTP request.CVSS8.8HighEPSS2.84%