CVE-2023-38829-NETIS-WF2409E_Report

Netis WF2409E Device Report 1. Device Overview 1.1 Main Specifications Table Category| Parameter| Description ---|---|--- Device Information| Model| Netis WF2409E | Type| 300Mbps Wireless N Router | Power Supply| DC 9V/500mA | Hardware Version| V1.8 | PCB Version| PB-7189-M02G-20 | Production...

CVE-2023-38829-NETIS-WF2409E

CVE-2023-38829-NETIS-WF2409E NETIS SYSTEMS Router WF2409E Command Injection PoC Vulnerability Description: The ping and traceroute functions of the NETIS SYSTEMS Router WF2409E version V3.6.42541 are susceptible to command injection attacks. Malicious input can be crafted in the parameters of the...

CVE-2026-108898

A vulnerability was detected in Netis WF2409E 3.3.42541. This affects an unknown function of the component Wireless Settings. The manipulation of the argument SSID results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. The vendor was...

EUVD-2026-97484

A vulnerability was detected in Netis WF2409E 3.3.42541. This affects an unknown function of the component Wireless Settings. The manipulation of the argument SSID results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. The vendor was...

CVE-2026-108898

A cross-site scripting (XSS) vulnerability exists in the Wireless Settings component of the Netis WF2409E (version 3.3.42541). The root cause is the improper neutralization of input when the SSID argument is manipulated, which may be exploited remotely. The documents indicate that an exploit is n...

CVE-2026-108898 Netis WF2409E Wireless Settings cross site scripting

A vulnerability was detected in Netis WF2409E 3.3.42541. This affects an unknown function of the component Wireless Settings. The manipulation of the argument SSID results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. The vendor was...

PT-2026-110619

Name of the Vulnerable Software and Affected Versions Netis WF2409E version 3.3.42541 Description A remote cross-site scripting issue exists within the Wireless Settings component. This occurs when the SSID argument is manipulated, allowing an attacker to execute malicious scripts in the context ...

CVE-2026-108898: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in Netis WF2409E 3.3.42541. This affects an unknown function of the component Wireless Settings. The manipulation of the argument SSID results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. The vendor was...

Netis WF2409E Cross-Site Scripting Vulnerability

The Netis WF2409E 3.3.42541 version has a security vulnerability. This vulnerability stems from improper handling of the SSID parameter by an unknown function in the Wireless Settings component. It is vulnerable to cross-site scripting attacks, and attackers can exploit this vulnerability remotel...

CVE-2023-38829

An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of the diagnostic tools component in the admin management interface...

CVE-2023-38829

An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of the diagnostic tools component in the admin management interface...