CVE-2025-50608: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN00471994 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wlbaseset in the payload, which can cause the program to crash and potentially lead to a Denial ...

CVE-2025-50615: Uncontrolled Resource Consumption

A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN00470c50 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wlmacfilterset in the payload, which can cause the program to crash and lead to a Denial of...

CVE-2025-50610

A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN00476598 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wlbaseset5g in the payload, which can cause the program to crash and potentially lead to a Denia...

CVE-2025-50613: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN00475e1c function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wdskeywep in the payload, which can cause the program to crash and potentially lead to a Denial ...

PT-2025-33033 · Netis · Netis Wf2880

Name of the Vulnerable Software and Affected Versions: Netis WF2880 version 2.1.40207 Description: A buffer overflow issue exists in the FUN 0046ed68 function of the cgitest.cgi file. Attackers can exploit this by controlling the wps set value within a crafted payload, potentially leading to a...

CVE-2025-50615

The Netis WF2880 wireless router, specifically version v2.1.40207 , contains a buffer overflow vulnerability in the FUN_00470c50 function of the cgitest.cgi file. An attacker can trigger this vulnerability by controlling the value of wl_mac_filter_set within the payload, which can cause the progr...

CVE-2024-25851

Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the configsequence parameter in otherpara of cgitest.cgi...

CVE-2025-45835

A null pointer dereference vulnerability was discovered in Netis WF2880 v2.1.40207. The vulnerability exists in the FUN004904c8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the environment variable value CONTENTLENGTH, causing the program to crash and...

CVE-2025-45835: NULL Pointer Dereference

A null pointer dereference vulnerability was discovered in Netis WF2880 v2.1.40207. The vulnerability exists in the FUN004904c8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the environment variable value CONTENTLENGTH, causing the program to crash and...

CVE-2024-25851

Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the configsequence parameter in otherpara of cgitest.cgi...

Command injection

Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the configsequence parameter in otherpara of cgitest.cgi...

PT-2024-21164 · Netis · Netis Wf2780

Name of the Vulnerable Software and Affected Versions: Netis WF2780 version 2.1.40144 Description: A command injection issue was discovered via the config sequence parameter in other para of cgitest.cgi. This allows for potential command execution. Recommendations: For Netis WF2780 version...

CVE-2024-25851

The Netis WF2780 router, specifically version v2.1.40144 , is susceptible to a command injection vulnerability. The flaw exists in the cgitest.cgi endpoint via the config_sequence parameter within the other_para field, potentially allowing for unauthorized command execution. To mitigate this risk...

CVE-2024-25851

Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the configsequence parameter in otherpara of cgitest.cgi...

CVE-2024-25851: Improper Neutralization of Special Elements used in an OS Command

Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the configsequence parameter in otherpara of cgitest.cgi...

CVE-2024-25851

Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the configsequence parameter in otherpara of cgitest.cgi...