İçeriğe atla
Noroxi

netis-systems kayıtları

netis-systems üreticisine ait 51 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
1 · %2
Silahlaştırılmış
2 · %3,9
Pre-auth RCE
12
Düzeltme kaydı olan
%2
Yayından KEV’e ortanca
635 gün

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 23
  6. 24
  7. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

51 kayıt
  • CVE-2019-19356
    68Bu hafta

    Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page.

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %28

    netis-systems · wf2419 firmware7 Şub 2020

  • CVE-2024-22729
    60Bu hafta

    NETIS SYSTEMS MW5360 V1.0.1.3031 was discovered to contain a command injection vulnerability via the password parameter on the login page.

    KritikCVSS 9,8SilahlaştırılmışEPSS %71

    netis-systems · mw5360 firmware25 Oca 2024

  • CVE-2021-26747
    55Planlayın

    Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execut

    KritikCVSS 9,8İstismar yokEPSS %55

    netis-systems · wf2780 firmware18 Şub 2021

  • CVE-2024-25850
    45Planlayın

    Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the wps_ap_ssid5g parameter

    KritikCVSS 9,8İstismar yokEPSS %19

    netis-systems · wf2780 firmware22 Şub 2024

  • CVE-2019-8985
    43Planlayın

    On Netis WF2411 with firmware 2.1.36123 and other Netis WF2xxx devices (possibly WF2411 through WF2880), there is a stack-based buffer overf

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    netis-systems · wf2411 firmware21 Şub 2019

  • CVE-2023-45466
    40Planlayın

    Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the pin_host parameter in the WPS Settings.

    KritikCVSS 9,8İstismar yokEPSS %2

    netis-systems · n3mv2 firmware13 Eki 2023

  • CVE-2023-45467
    40Planlayın

    Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ntpServIP parameter in the Time Settings.

    KritikCVSS 9,8İstismar yokEPSS %2

    netis-systems · n3m firmware13 Eki 2023

  • CVE-2023-43892
    40Planlayın

    Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the WAN settings.

    KritikCVSS 9,8İstismar yokEPSS %2

    netis-systems · n3m firmware2 Eki 2023

  • CVE-2023-43891
    40Planlayın

    Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the Changing Username and Password function.

    KritikCVSS 9,8İstismar yokEPSS %2

    netis-systems · n3m firmware2 Eki 2023

  • CVE-2023-43893
    40Planlayın

    Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the wakeup_mac parameter in the Wake-On-LAN (WoL) fun

    KritikCVSS 9,8İstismar yokEPSS %2

    netis-systems · n3m firmware2 Eki 2023

  • CVE-2023-45465
    40Planlayın

    Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ddnsDomainName parameter in the Dynamic DNS setti

    KritikCVSS 9,8İstismar yokEPSS %2

    netis-systems · n3m firmware13 Eki 2023

  • CVE-2023-42336
    39İzleyin

    An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via the

    KritikCVSS 9,8İstismar yokEPSS %1

    netis-systems · wf2409e firmware15 Eyl 2023

  • CVE-2024-33792
    39İzleyin

    netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the tracert page.

    KritikCVSS 9,8İstismar yokEPSS %1

    netis-systems · mex605 firmware3 May 2024

  • CVE-2023-43134
    39İzleyin

    There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the d

    KritikCVSS 9,8İstismar yokEPSS %1

    netis-systems · 360r firmware20 Eyl 2023

  • CVE-2018-25069
    39İzleyin

    Netis Netcore Router hard-coded password

    KritikCVSS 9,8İstismar yokEPSS %1

    netis-systems · netcore router firmware7 Oca 2023

  • CVE-2023-44860
    36İzleyin

    An issue in NETIS SYSTEMS N3Mv2 v.1.0.1.865 allows a remote attacker to cause a denial of service via the authorization component in the HTT

    YüksekCVSS 7,5İstismar yokEPSS %20

    netis-systems · n3m firmware6 Eki 2023

  • CVE-2023-43890
    36İzleyin

    Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the diagnostic tools page.

    YüksekCVSS 8,8İstismar yokEPSS %3

    netis-systems · n3m firmware2 Eki 2023

  • CVE-2023-38829
    36İzleyin

    An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of th

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    netis-systems · wf2409e firmware11 Eyl 2023

  • CVE-2020-8946
    36İzleyin

    Netis WF2471 v1.2.30142 devices allow an authenticated attacker to execute arbitrary OS commands via shell metacharacters in the /cgi-bin-ig

    YüksekCVSS 8,8İstismar yokEPSS %2

    netis-systems · wf2471 firmware12 Şub 2020

  • CVE-2019-20074
    35İzleyin

    On Netis DL4323 devices, any user role can view sensitive information, such as a user password or the FTP password, via the form2saveConf.cg

    YüksekCVSS 8,8İstismar yokEPSS %1

    netis-systems · dl4343 firmware29 Ara 2019

  • CVE-2018-6391
    35İzleyin

    A cross-site request forgery web vulnerability has been discovered on Netis WF2419 V2.2.36123 devices.

    YüksekCVSS 8,8İstismar yokEPSS %1

    netis-systems · wf2419 firmware29 Oca 2018

  • CVE-2024-25851
    33İzleyin

    Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the config_sequence parameter in other_para of cgite

    YüksekCVSS 8,0İstismar yokEPSS %2

    netis-systems · wf2780 firmware22 Şub 2024

  • CVE-2023-0113
    30İzleyin

    Netis Netcore Router Backup param.file.tgz information disclosure

    YüksekCVSS 7,5İstismar yokEPSS %1

    netis-systems · netcore router firmware7 Oca 2023

  • CVE-2023-45468
    30İzleyin

    Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the pingWdogIp.

    YüksekCVSS 7,5İstismar yokEPSS %1

    netis-systems · n3m firmware13 Eki 2023

  • CVE-2023-45463
    30İzleyin

    Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the hostName parameter in the FUN_0040dabc function.

    YüksekCVSS 7,5İstismar yokEPSS %1

    netis-systems · n3m firmware13 Eki 2023