Netis Systems Wf2880 vulnerabilities
12 vulnerabilities
Known vulnerabilities in Netis Systems Wf2880, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
PrioritiseCVE-2025-50617netis-systems · wf2880_firmwarenetis-systems wf2880_firmwareA buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_0046ed68 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wps_set in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack.CVSS7.5HighEPSS0.43%PrioritiseCVE-2025-50616netis-systems · wf2880_firmwarenetis-systems wf2880_firmwareA buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_0046f984 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_advanced_set in the payload, which can cause the program to crash and lead to a Denial of Service (DoS) attack.CVSS7.5HighEPSS0.43%PrioritiseCVE-2025-50615netis-systems · wf2880_firmwarenetis-systems wf2880_firmwareA buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00470c50 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_mac_filter_set in the payload, which can cause the program to crash and lead to a Denial of Service (DoS) attack.CVSS7.5HighEPSS0.43%PrioritiseCVE-2025-50614netis-systems · wf2880_firmwarenetis-systems wf2880_firmwareA buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the FUN_0047151c function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wds_set in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack.CVSS7.5HighEPSS0.43%PrioritiseCVE-2025-50613netis-systems · wf2880_firmwarenetis-systems wf2880_firmwareA buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00475e1c function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wds_key_wep in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack.CVSS7.5HighEPSS0.43%PrioritiseCVE-2025-50612netis-systems · wf2880_firmwarenetis-systems wf2880_firmwareA buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the FUN_004743f8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_sec_set in the payload, which may cause the program to crash and potentially lead to a Denial of Service (DoS) attack.CVSS7.5HighEPSS0.43%PrioritiseCVE-2025-50611netis-systems · wf2880_firmwarenetis-systems wf2880_firmwareA buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00473154 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_sec_set_5g and wl_sec_rp_set_5g in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack.CVSS7.5HighEPSS0.43%PrioritiseCVE-2025-50610netis-systems · wf2880_firmwarenetis-systems wf2880_firmwareA buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00476598 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_base_set_5g in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack.CVSS7.5HighEPSS0.45%PrioritiseCVE-2025-50609netis-systems · wf2880_firmwarenetis-systems wf2880_firmwareA buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the Function_00465620 of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of specify_parame in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack.CVSS7.5HighEPSS0.43%PrioritiseCVE-2025-50608netis-systems · wf2880_firmwarenetis-systems wf2880_firmwareA buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00471994 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_base_set in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack.CVSS7.5HighEPSS0.45%PrioritiseCVE-2025-45835netis-systems · wf2880_firmwarenetis-systems wf2880_firmwareA null pointer dereference vulnerability was discovered in Netis WF2880 v2.1.40207. The vulnerability exists in the FUN_004904c8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the environment variable value CONTENT_LENGTH, causing the program to crash and potentially leading to a denial-of-service (DoS) attack.CVSS7.5HighEPSS0.49%PrioritiseCVE-2019-8985netis-systems · wf2411_firmware +1 morenetis-systems wf2411_firmwareOn Netis WF2411 with firmware 2.1.36123 and other Netis WF2xxx devices (possibly WF2411 through WF2880), there is a stack-based buffer overflow that does not require authentication. This can cause denial of service (device restart) or remote code execution. This vulnerability can be triggered by a GET request with a long HTTP "Authorization: Basic" header that is mishandled by user_auth->user_ok in /bin/boa.CVSS9.8CriticalEPSS13.30%