CVE-2019-8985

🗓️ 21 Feb 2019 19:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 53 Views🌐 WEB

Netis WF2411 and other WF2xxx devices firmware 2.1.36123 and earlier allow unauthenticated stack-based buffer overflow, leading to denial of service or remote code execution via mishandled "Authorization: Basic" HTTP header in /bin/boa

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2019-8985	21 Feb 201919:00	–	cvelist
NVD	CVE-2019-8985	21 Feb 201919:29	–	nvd
OSV	CVE-2019-8985	21 Feb 201919:29	–	osv
Prion	Stack overflow	21 Feb 201919:29	–	prion

NVD

Node

netis-systems wf2411_firmwareMatch2.1.36123

AND

netis-systems wf2411Match-

Node

netis-systems wf2880_firmwareMatch2.1.36123

AND

netis-systems wf2880Match-

Source	Link
github	www.github.com/WhooAmii/whooamii.github.io/blob/master/2018/netis/buffer%20overflow.md

Parameter	Position	Path	Description	CWE
Authorization	header	/bin/boa	Stack-based buffer overflow via long HTTP Authorization header in /bin/boa (GET) leading to potential DoS or RCE.	CWE-787, CWE-306

17 Jun 2026 02:42Current

9.8High risk

Vulners AI Score9.8

CVSS 29

CVSS 39.8

EPSS0.13296

CWE-787 CWE-306

netis wf2411 wf2xxx firmware buffer overflow denial of service remote code execution http security vulnerability