Записи netis-systems
51 опубликованных записей вендора netis-systems.
Профиль для исследователя
- Попали в KEV
- 1 · 2 %
- С эксплойтом
- 2 · 3,9 %
- Pre-auth RCE
- 12
- С записью об исправлении
- 2 %
- Медиана: публикация → KEV
- 635 дн.
Повторяющиеся классы
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')11
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')10
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')6
- CWE-476 NULL Pointer Dereference2
- CWE-352 Cross-Site Request Forgery (CSRF)2
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
51 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
68На этой неделе | CVE-2019-19356Готовый эксплойт | Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page.netis-systems · wf2419 firmware · CWE-78 | Высокая7,5 | KEV | 28,1 % | 7 февр. 2020 г. |
60На этой неделе | CVE-2024-22729Готовый эксплойт | NETIS SYSTEMS MW5360 V1.0.1.3031 was discovered to contain a command injection vulnerability via the password parameter on the login page.netis-systems · mw5360 firmware · CWE-77 | Критическая9,8 | — | 70,7 % | 25 янв. 2024 г. |
55В плане | CVE-2021-26747Эксплойта нет | Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code executnetis-systems · wf2780 firmware · CWE-78 | Критическая9,8 | — | 54,7 % | 18 февр. 2021 г. |
45В плане | CVE-2024-25850Эксплойта нет | Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the wps_ap_ssid5g parameternetis-systems · wf2780 firmware · CWE-77 | Критическая9,8 | — | 19,0 % | 22 февр. 2024 г. |
43В плане | CVE-2019-8985Proof of concept | On Netis WF2411 with firmware 2.1.36123 and other Netis WF2xxx devices (possibly WF2411 through WF2880), there is a stack-based buffer overfnetis-systems · wf2411 firmware · CWE-306 | Критическая9,8 | — | 13,2 % | 21 февр. 2019 г. |
40В плане | CVE-2023-43892Эксплойта нет | Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the WAN settings.netis-systems · n3m firmware · CWE-78 | Критическая9,8 | — | 2,2 % | 2 окт. 2023 г. |
40В плане | CVE-2023-43893Эксплойта нет | Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the wakeup_mac parameter in the Wake-On-LAN (WoL) funnetis-systems · n3m firmware · CWE-78 | Критическая9,8 | — | 2,2 % | 2 окт. 2023 г. |
40В плане | CVE-2023-43891Эксплойта нет | Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the Changing Username and Password function.netis-systems · n3m firmware · CWE-77 | Критическая9,8 | — | 2,2 % | 2 окт. 2023 г. |
40В плане | CVE-2023-45467Эксплойта нет | Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ntpServIP parameter in the Time Settings.netis-systems · n3m firmware · CWE-78 | Критическая9,8 | — | 2,2 % | 13 окт. 2023 г. |
40В плане | CVE-2023-45466Эксплойта нет | Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the pin_host parameter in the WPS Settings.netis-systems · n3mv2 firmware · CWE-77 | Критическая9,8 | — | 2,2 % | 13 окт. 2023 г. |
40В плане | CVE-2023-45465Эксплойта нет | Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ddnsDomainName parameter in the Dynamic DNS settinetis-systems · n3m firmware · CWE-77 | Критическая9,8 | — | 2,1 % | 13 окт. 2023 г. |
39Наблюдать | CVE-2023-42336Эксплойта нет | An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via the netis-systems · wf2409e firmware · CWE-798 | Критическая9,8 | — | 1,2 % | 15 сент. 2023 г. |
39Наблюдать | CVE-2024-33792Эксплойта нет | netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the tracert page.netis-systems · mex605 firmware · CWE-78 | Критическая9,8 | — | 0,9 % | 3 мая 2024 г. |
39Наблюдать | CVE-2018-25069Эксплойта нет | Netis Netcore Router hard-coded passwordnetis-systems · netcore router firmware · CWE-259 | Критическая9,8 | — | 0,9 % | 7 янв. 2023 г. |
39Наблюдать | CVE-2023-43134Эксплойта нет | There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the dnetis-systems · 360r firmware · CWE-862 | Критическая9,8 | — | 0,8 % | 20 сент. 2023 г. |
37Наблюдать | CVE-2023-44860Эксплойта нет | An issue in NETIS SYSTEMS N3Mv2 v.1.0.1.865 allows a remote attacker to cause a denial of service via the authorization component in the HTTnetis-systems · n3m firmware · CWE-863 | Высокая7,5 | — | 22,7 % | 6 окт. 2023 г. |
36Наблюдать | CVE-2023-43890Эксплойта нет | Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the diagnostic tools page.netis-systems · n3m firmware · CWE-78 | Высокая8,8 | — | 2,8 % | 2 окт. 2023 г. |
36Наблюдать | CVE-2023-38829Proof of concept | An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of thnetis-systems · wf2409e firmware · CWE-77 | Высокая8,8 | — | 2,4 % | 11 сент. 2023 г. |
36Наблюдать | CVE-2020-8946Эксплойта нет | Netis WF2471 v1.2.30142 devices allow an authenticated attacker to execute arbitrary OS commands via shell metacharacters in the /cgi-bin-ignetis-systems · wf2471 firmware · CWE-78 | Высокая8,8 | — | 1,8 % | 12 февр. 2020 г. |
35Наблюдать | CVE-2019-20074Эксплойта нет | On Netis DL4323 devices, any user role can view sensitive information, such as a user password or the FTP password, via the form2saveConf.cgnetis-systems · dl4343 firmware · CWE-269 | Высокая8,8 | — | 1,3 % | 29 дек. 2019 г. |
35Наблюдать | CVE-2018-6391Эксплойта нет | A cross-site request forgery web vulnerability has been discovered on Netis WF2419 V2.2.36123 devices.netis-systems · wf2419 firmware · CWE-352 | Высокая8,8 | — | 0,9 % | 29 янв. 2018 г. |
33Наблюдать | CVE-2024-25851Эксплойта нет | Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the config_sequence parameter in other_para of cgitenetis-systems · wf2780 firmware · CWE-78 | Высокая8,0 | — | 1,9 % | 22 февр. 2024 г. |
30Наблюдать | CVE-2023-45468Эксплойта нет | Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the pingWdogIp.netis-systems · n3m firmware · CWE-120 | Высокая7,5 | — | 0,8 % | 13 окт. 2023 г. |
30Наблюдать | CVE-2023-0113Эксплойта нет | Netis Netcore Router Backup param.file.tgz information disclosurenetis-systems · netcore router firmware · CWE-200 | Высокая7,5 | — | 0,8 % | 7 янв. 2023 г. |
30Наблюдать | CVE-2023-45463Эксплойта нет | Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the hostName parameter in the FUN_0040dabc function.netis-systems · n3m firmware · CWE-120 | Высокая7,5 | — | 0,7 % | 13 окт. 2023 г. |
- CVE-2019-1935668На этой неделе
Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page.
ВысокаяCVSS 7,5KEVГотовый эксплойтEPSS 28 %netis-systems · wf2419 firmware7 февр. 2020 г.
- CVE-2024-2272960На этой неделе
NETIS SYSTEMS MW5360 V1.0.1.3031 was discovered to contain a command injection vulnerability via the password parameter on the login page.
КритическаяCVSS 9,8Готовый эксплойтEPSS 70 %netis-systems · mw5360 firmware25 янв. 2024 г.
- CVE-2021-2674755В плане
Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execut
КритическаяCVSS 9,8Эксплойта нетEPSS 54 %netis-systems · wf2780 firmware18 февр. 2021 г.
- CVE-2024-2585045В плане
Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the wps_ap_ssid5g parameter
КритическаяCVSS 9,8Эксплойта нетEPSS 19 %netis-systems · wf2780 firmware22 февр. 2024 г.
- CVE-2019-898543В плане
On Netis WF2411 with firmware 2.1.36123 and other Netis WF2xxx devices (possibly WF2411 through WF2880), there is a stack-based buffer overf
КритическаяCVSS 9,8Proof of conceptEPSS 13 %netis-systems · wf2411 firmware21 февр. 2019 г.
- CVE-2023-4389240В плане
Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the WAN settings.
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %netis-systems · n3m firmware2 окт. 2023 г.
- CVE-2023-4389340В плане
Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the wakeup_mac parameter in the Wake-On-LAN (WoL) fun
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %netis-systems · n3m firmware2 окт. 2023 г.
- CVE-2023-4389140В плане
Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the Changing Username and Password function.
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %netis-systems · n3m firmware2 окт. 2023 г.
- CVE-2023-4546740В плане
Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ntpServIP parameter in the Time Settings.
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %netis-systems · n3m firmware13 окт. 2023 г.
- CVE-2023-4546640В плане
Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the pin_host parameter in the WPS Settings.
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %netis-systems · n3mv2 firmware13 окт. 2023 г.
- CVE-2023-4546540В плане
Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ddnsDomainName parameter in the Dynamic DNS setti
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %netis-systems · n3m firmware13 окт. 2023 г.
- CVE-2023-4233639Наблюдать
An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via the
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %netis-systems · wf2409e firmware15 сент. 2023 г.
- CVE-2024-3379239Наблюдать
netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the tracert page.
КритическаяCVSS 9,8Эксплойта нетEPSS 0 %netis-systems · mex605 firmware3 мая 2024 г.
- CVE-2018-2506939Наблюдать
Netis Netcore Router hard-coded password
КритическаяCVSS 9,8Эксплойта нетEPSS 0 %netis-systems · netcore router firmware7 янв. 2023 г.
- CVE-2023-4313439Наблюдать
There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the d
КритическаяCVSS 9,8Эксплойта нетEPSS 0 %netis-systems · 360r firmware20 сент. 2023 г.
- CVE-2023-4486037Наблюдать
An issue in NETIS SYSTEMS N3Mv2 v.1.0.1.865 allows a remote attacker to cause a denial of service via the authorization component in the HTT
ВысокаяCVSS 7,5Эксплойта нетEPSS 22 %netis-systems · n3m firmware6 окт. 2023 г.
- CVE-2023-4389036Наблюдать
Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the diagnostic tools page.
ВысокаяCVSS 8,8Эксплойта нетEPSS 2 %netis-systems · n3m firmware2 окт. 2023 г.
- CVE-2023-3882936Наблюдать
An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of th
ВысокаяCVSS 8,8Proof of conceptEPSS 2 %netis-systems · wf2409e firmware11 сент. 2023 г.
- CVE-2020-894636Наблюдать
Netis WF2471 v1.2.30142 devices allow an authenticated attacker to execute arbitrary OS commands via shell metacharacters in the /cgi-bin-ig
ВысокаяCVSS 8,8Эксплойта нетEPSS 1 %netis-systems · wf2471 firmware12 февр. 2020 г.
- CVE-2019-2007435Наблюдать
On Netis DL4323 devices, any user role can view sensitive information, such as a user password or the FTP password, via the form2saveConf.cg
ВысокаяCVSS 8,8Эксплойта нетEPSS 1 %netis-systems · dl4343 firmware29 дек. 2019 г.
- CVE-2018-639135Наблюдать
A cross-site request forgery web vulnerability has been discovered on Netis WF2419 V2.2.36123 devices.
ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %netis-systems · wf2419 firmware29 янв. 2018 г.
- CVE-2024-2585133Наблюдать
Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the config_sequence parameter in other_para of cgite
ВысокаяCVSS 8,0Эксплойта нетEPSS 1 %netis-systems · wf2780 firmware22 февр. 2024 г.
- CVE-2023-4546830Наблюдать
Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the pingWdogIp.
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %netis-systems · n3m firmware13 окт. 2023 г.
- CVE-2023-011330Наблюдать
Netis Netcore Router Backup param.file.tgz information disclosure
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %netis-systems · netcore router firmware7 янв. 2023 г.
- CVE-2023-4546330Наблюдать
Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the hostName parameter in the FUN_0040dabc function.
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %netis-systems · n3m firmware13 окт. 2023 г.