Netis Systems Wf2780 vulnerabilities
4 vulnerabilities
Known vulnerabilities in Netis Systems Wf2780, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
PrioritiseCVE-2025-50635netis-systems · wf2780_firmwarenetis-systems wf2780_firmwareA null pointer dereference vulnerability was discovered in Netis WF2780 v2.2.35445. The vulnerability exists in the FUN_0048a728 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the CONTENT_LENGTH variable, causing the program to crash and potentially leading to a denial-of-service (DoS) attack.CVSS7.5HighEPSS0.44%PrioritiseCVE-2024-25851netis-systems · wf2780_firmwarenetis-systems wf2780_firmwareNetis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the config_sequence parameter in other_para of cgitest.cgi.CVSS8.0HighEPSS1.94%PrioritiseCVE-2024-25850netis-systems · wf2780_firmwarenetis-systems wf2780_firmwareNetis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the wps_ap_ssid5g parameterCVSS9.8CriticalEPSS19.07%PrioritiseCVE-2021-26747netis-systems · wf2411_firmware +1 morenetis-systems wf2411_firmwareNetis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution.CVSS10.0CriticalEPSS54.78%