Skip to content
Noroxi

netis-systems records

51 published records for vendor netis-systems.

Researcher profile

Entered KEV
1 · 2%
Weaponized
2 · 3.9%
Pre-auth RCE
12
With a fix record
2%
Median publish → KEV
635 days

Records by year

  1. 18
  2. 19
  3. 20
  4. 21
  5. 23
  6. 24
  7. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

51 records
  • CVE-2019-19356
    68This week

    Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page.

    HighCVSS 7.5KEVWeaponizedEPSS 28%

    netis-systems · wf2419 firmwareFeb 7, 2020

  • CVE-2024-22729
    60This week

    NETIS SYSTEMS MW5360 V1.0.1.3031 was discovered to contain a command injection vulnerability via the password parameter on the login page.

    CriticalCVSS 9.8WeaponizedEPSS 70%

    netis-systems · mw5360 firmwareJan 25, 2024

  • CVE-2021-26747
    55Plan

    Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execut

    CriticalCVSS 9.8No exploitEPSS 54%

    netis-systems · wf2780 firmwareFeb 18, 2021

  • CVE-2024-25850
    45Plan

    Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the wps_ap_ssid5g parameter

    CriticalCVSS 9.8No exploitEPSS 19%

    netis-systems · wf2780 firmwareFeb 22, 2024

  • CVE-2019-8985
    43Plan

    On Netis WF2411 with firmware 2.1.36123 and other Netis WF2xxx devices (possibly WF2411 through WF2880), there is a stack-based buffer overf

    CriticalCVSS 9.8Proof of conceptEPSS 13%

    netis-systems · wf2411 firmwareFeb 21, 2019

  • CVE-2023-43892
    40Plan

    Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the WAN settings.

    CriticalCVSS 9.8No exploitEPSS 2%

    netis-systems · n3m firmwareOct 2, 2023

  • CVE-2023-43893
    40Plan

    Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the wakeup_mac parameter in the Wake-On-LAN (WoL) fun

    CriticalCVSS 9.8No exploitEPSS 2%

    netis-systems · n3m firmwareOct 2, 2023

  • CVE-2023-43891
    40Plan

    Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the Changing Username and Password function.

    CriticalCVSS 9.8No exploitEPSS 2%

    netis-systems · n3m firmwareOct 2, 2023

  • CVE-2023-45467
    40Plan

    Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ntpServIP parameter in the Time Settings.

    CriticalCVSS 9.8No exploitEPSS 2%

    netis-systems · n3m firmwareOct 13, 2023

  • CVE-2023-45466
    40Plan

    Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the pin_host parameter in the WPS Settings.

    CriticalCVSS 9.8No exploitEPSS 2%

    netis-systems · n3mv2 firmwareOct 13, 2023

  • CVE-2023-45465
    40Plan

    Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ddnsDomainName parameter in the Dynamic DNS setti

    CriticalCVSS 9.8No exploitEPSS 2%

    netis-systems · n3m firmwareOct 13, 2023

  • CVE-2023-42336
    39Monitor

    An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via the

    CriticalCVSS 9.8No exploitEPSS 1%

    netis-systems · wf2409e firmwareSep 15, 2023

  • CVE-2024-33792
    39Monitor

    netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the tracert page.

    CriticalCVSS 9.8No exploitEPSS 0%

    netis-systems · mex605 firmwareMay 3, 2024

  • CVE-2018-25069
    39Monitor

    Netis Netcore Router hard-coded password

    CriticalCVSS 9.8No exploitEPSS 0%

    netis-systems · netcore router firmwareJan 7, 2023

  • CVE-2023-43134
    39Monitor

    There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the d

    CriticalCVSS 9.8No exploitEPSS 0%

    netis-systems · 360r firmwareSep 20, 2023

  • CVE-2023-44860
    37Monitor

    An issue in NETIS SYSTEMS N3Mv2 v.1.0.1.865 allows a remote attacker to cause a denial of service via the authorization component in the HTT

    HighCVSS 7.5No exploitEPSS 22%

    netis-systems · n3m firmwareOct 6, 2023

  • CVE-2023-43890
    36Monitor

    Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the diagnostic tools page.

    HighCVSS 8.8No exploitEPSS 2%

    netis-systems · n3m firmwareOct 2, 2023

  • CVE-2023-38829
    36Monitor

    An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of th

    HighCVSS 8.8Proof of conceptEPSS 2%

    netis-systems · wf2409e firmwareSep 11, 2023

  • CVE-2020-8946
    36Monitor

    Netis WF2471 v1.2.30142 devices allow an authenticated attacker to execute arbitrary OS commands via shell metacharacters in the /cgi-bin-ig

    HighCVSS 8.8No exploitEPSS 1%

    netis-systems · wf2471 firmwareFeb 12, 2020

  • CVE-2019-20074
    35Monitor

    On Netis DL4323 devices, any user role can view sensitive information, such as a user password or the FTP password, via the form2saveConf.cg

    HighCVSS 8.8No exploitEPSS 1%

    netis-systems · dl4343 firmwareDec 29, 2019

  • CVE-2018-6391
    35Monitor

    A cross-site request forgery web vulnerability has been discovered on Netis WF2419 V2.2.36123 devices.

    HighCVSS 8.8No exploitEPSS 0%

    netis-systems · wf2419 firmwareJan 29, 2018

  • CVE-2024-25851
    33Monitor

    Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the config_sequence parameter in other_para of cgite

    HighCVSS 8.0No exploitEPSS 1%

    netis-systems · wf2780 firmwareFeb 22, 2024

  • CVE-2023-45468
    30Monitor

    Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the pingWdogIp.

    HighCVSS 7.5No exploitEPSS 0%

    netis-systems · n3m firmwareOct 13, 2023

  • CVE-2023-0113
    30Monitor

    Netis Netcore Router Backup param.file.tgz information disclosure

    HighCVSS 7.5No exploitEPSS 0%

    netis-systems · netcore router firmwareJan 7, 2023

  • CVE-2023-45463
    30Monitor

    Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the hostName parameter in the FUN_0040dabc function.

    HighCVSS 7.5No exploitEPSS 0%

    netis-systems · n3m firmwareOct 13, 2023