CVE-2019-19356

NETIS路由器 WF2419 RCE CVE-2019-19356 背景 该漏洞是通过NETIS WF2419 路由器Web管理页面进行的经过身份验证的远程代码执行（RCE）漏洞，并以root权限执行。 该漏洞已在固件版本V1.2.31805和最新的可用固件版本V2.2.36123中发现。其他型号和固件也可能存在漏洞。 前提条件 为了利用该漏洞，需要满足几个前提条件。实际上，我们需要能够访问路由器的Web管理页面。此外，如果启用了身份验证，我们需要通过尝试弱密码/默认密码、执行中间人攻击或任何其他方式进行身份验证。 漏洞详情...

CVE-2019-8985

用于 CVE–2019–8985 Netis WF2411 RCE 研究的固件和exp :...

Netis Wifi Router - Information Disclosure

An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3503 and Netis Wifi 11AC Router NC21 3.0.0.3800, 3.0.0.3500 and 3.0.0.3329 and Netis Wifi Router MW5360 1.0.1.3442 and 1.0.1.3031 allows a...

CVE-2023-38829-NETIS-WF2409E

CVE-2023-38829-NETIS-WF2409E NETIS SYSTEMS 路由器 WF2409E 命令注入 PoC 漏洞描述： NETIS SYSTEMS 路由器 WF2409E（版本 V3.6.42541）的 ping 和 traceroute 功能容易受到命令注入攻击。通过 Web 管理界面，可以在这些功能的参数中构造恶意输入，从而以受影响进程的权限执行任意命令。 PoC 步骤： 1. 识别目标： 确保你有权访问 NETIS SYSTEMS 路由器 WF2409E（版本 V3.6.42541）的 Web 管理界面。 2. 打开 Ping 功能： 登录路由器的 Web 界面...

CVE-2023-38829-NETIS-WF2409E_Report

Netis WF2409E 设备报告 1. 设备概述 1.1 主要规格表 类别| 参数| 描述 ---|---|--- 设备信息| 型号| Netis WF2409E | 类型| 300Mbps 无线 N 路由器 | 电源| DC 9V/500mA | 硬件版本| V1.8 | PCB 版本| PB-7189-M02G-20 | 生产日期| 2015-03-23 | 生产国| 中国 网络标识| 序列号| 2409EEU5B102714 V1.8 | MAC 地址| W8D398DFB68 | 默认 SSID| netisBDFB68 | 默认密码| password | 管理地址|...

Netis MW5360 V1.0.1.3031 - Command Injection

NETIS SYSTEMS MW5360 V1.0.1.3031 was discovered to contain a command injection vulnerability via the password parameter on the login page. id: CVE-2024-22729 info: name: Netis MW5360 V1.0.1.3031 - Command Injection author: pussycat0x severity: critical description: | NETIS SYSTEMS MW5360...

Netis-N5VN-AC1200-DOS

Título del Exploit: Netis N5VN AC1200 - Buffer Overflow DOS Denegación de Servicio Fecha: 05/03/2024 Autor del Exploit: Van Lam Nguyen Facebook: fb.com/vanlam1412 Página del fabricante: Netis Systems Versión: Netis N5VN AC1200 V1.0.1.1742 Probado en: Windows CVE : CVE-2024-44596 Resumen Existe un...

CVE-2026-76071

CVE-2026-76071: Unauthenticated Pre-Auth Stack Buffer Overflow via sscanf %^, in skkset.cgi ipFilterList Handler in Netis NC63 Researcher: Özcan Ersan @ozcanpng Disclosure status CVE: CVE-2026-76071 Vendor: Netis Systems Co., Ltd. Product: Netis NC63 AC1200 Wireless Dual Band Gigabit MU-MIMO Rout...

CVE-2026-73673

CVE-2026-73673: Netis NC63 Unauthenticated Firmware Update with Missing Cryptographic Firmware Authentication Original vulnerability research by Özcan Ersan @ozcanpng. This repository documents CVE-2026-73673, discovered and reported by the author. Non-destructive proof-of-concept and evidence...

CVE-2026-76070

CVE-2026-76070: Unauthenticated Pre-Auth Stack Buffer Overflow via Base64-Decoded Password in Netis NC63 login.cgi Leading to RCE Researcher: Özcan Ersan @ozcanpng Disclosure status CVE: CVE-2026-76070 Vendor: Netis Systems Co., Ltd. Product: Netis NC63 Wireless AC1200 Router Tested firmware:...

CVE-2026-61516

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the administrator password by sending a request to the sysinfo action in the web management interface without a valid session. Attackers can replay the...

CVE-2026-61517

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an OS command injection vulnerability in the ping diagnostic handler that allows authenticated administrators to execute arbitrary shell commands as root by injecting into the IpAddr parameter. The parameter is interpolated directly into a...

CVE-2026-61517 Netis NX10 OS Command Injection via Ping Diagnostic Handler

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an OS command injection vulnerability in the ping diagnostic handler that allows authenticated administrators to execute arbitrary shell commands as root by injecting into the IpAddr parameter. The parameter is interpolated directly into a...

CVE-2026-61517

Netis NX10 firmware versions V4.0.1.5808 and V3.0.0.4142 contain an OS command injection vulnerability in the ping diagnostic handler . An authenticated administrator can inject into the IpAddr parameter, which is interpolated directly into a shell command executed via system() . Input validation...

EUVD-2026-72808

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an OS command injection vulnerability in the ping diagnostic handler that allows authenticated administrators to execute arbitrary shell commands as root by injecting into the IpAddr parameter. The parameter is interpolated directly into a...

CVE-2026-61517 Netis NX10 OS Command Injection via Ping Diagnostic Handler

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an OS command injection vulnerability in the ping diagnostic handler that allows authenticated administrators to execute arbitrary shell commands as root by injecting into the IpAddr parameter. The parameter is interpolated directly into a...

CVE-2026-61516 Netis NX10 Credential Disclosure via sysinfo Diagnostic Endpoint

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the administrator password by sending a request to the sysinfo action in the web management interface without a valid session. Attackers can replay the...

CVE-2026-61516

The Netis NX10 (firmware V4.0.1.5808 and V3.0.0.4142) contains an information disclosure vulnerability in the sysinfo diagnostic endpoint of its web management interface. An unauthenticated attacker can retrieve the administrator password by sending a request to this action without a valid sessio...

CVE-2026-61516 Netis NX10 Credential Disclosure via sysinfo Diagnostic Endpoint

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the administrator password by sending a request to the sysinfo action in the web management interface without a valid session. Attackers can replay the...

EUVD-2026-72805

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the administrator password by sending a request to the sysinfo action in the web management interface without a valid session. Attackers can replay the...