Netis Systems Wf2411 vulnerabilities
2 vulnerabilities
Known vulnerabilities in Netis Systems Wf2411, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
PrioritiseCVE-2021-26747netis-systems · wf2411_firmware +1 morenetis-systems wf2411_firmwareNetis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution.CVSS10.0CriticalEPSS54.78%PrioritiseCVE-2019-8985netis-systems · wf2411_firmware +1 morenetis-systems wf2411_firmwareOn Netis WF2411 with firmware 2.1.36123 and other Netis WF2xxx devices (possibly WF2411 through WF2880), there is a stack-based buffer overflow that does not require authentication. This can cause denial of service (device restart) or remote code execution. This vulnerability can be triggered by a GET request with a long HTTP "Authorization: Basic" header that is mishandled by user_auth->user_ok in /bin/boa.CVSS9.8CriticalEPSS13.30%