CVE-2025-50615

A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN00470c50 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wlmacfilterset in the payload, which can cause the program to crash and lead to a Denial of...

PT-2025-33012 · Netis · Netis Wf2780

Name of the Vulnerable Software and Affected Versions: Netis WF2780 version 2.2.35445 Description: A null pointer dereference issue exists in the FUN 0048a728 function within the cgitest.cgi file. Exploitation involves controlling the CONTENT LENGTH variable, which can lead to a denial-of-service...

CVE-2025-50613

A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN00475e1c function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wdskeywep in the payload, which can cause the program to crash and potentially lead to a Denial ...

PT-2025-33015 · Netis · Netis Wf2880

Name of the Vulnerable Software and Affected Versions: Netis WF2880 version 2.1.40207 Description: A buffer overflow issue exists in the FUN 00475e1c function of the cgitest.cgi file. Attackers can exploit this by controlling the wds key wep variable within the payload, potentially causing a Deni...

PT-2025-33013 · Netis · Netis Wf2880

Name of the Vulnerable Software and Affected Versions: Netis WF2880 version 2.1.40207 Description: A buffer overflow vulnerability exists in the FUN 00473154 function of the cgitest.cgi file. Attackers can trigger this issue by controlling the values of wl sec set 5g and wl sec rp set 5g within t...

Netis WF2880 安全漏洞

The Netis WF2880 is a wireless router from the Chinese company Netis. A buffer overflow vulnerability exists in the Netis WF2880 FUN00476598 function, which can be exploited by an attacker to cause a denial of service...

CVE-2025-50615

CVE-2025-50615 affects Netis WF2880 firmware v2.1.40207. A buffer overflow in the FUN_00470c50 function of cgitest.cgi can be triggered by controlling the wl_mac_filter_set value in the payload, causing the process to crash and enabling a Denial of Service (DoS). Connected sources confirm the aff...

CVE-2025-50611

Netis WF2880 vulnerability CVE-2025-50611: A buffer overflow in the FUN_00473154 function of the cgitest.cgi file in firmware version 2.1.40207 can be triggered by crafted payloads that set wl_sec_set_5g and wl_sec_rp_set_5g, causing the program to crash and potentially leading to a Denial of Ser...

Netis WF2880 安全漏洞

The Netis WF2880 is a wireless router from the Chinese company Netis. A buffer overflow vulnerability exists in the Netis WF2880 FUN0046ed68 function, which can be exploited by an attacker to cause a denial of service...

CVE-2025-50610

Netis WF2880 v2.1.40207 contains a buffer overflow in the FUN_00476598 function of cgitest.cgi. An attacker can trigger it by manipulating wl_base_set_5g in the payload, causing the device to crash and potentially enabling a Denial of Service (DoS). Connected sources consistently reference this e...

CVE-2025-50612

The vulnerability CVE-2025-50612 affects Netis WF2880 firmware v2.1.40207, specifically the FUN_004743f8 function in cgitest.cgi. An attacker can trigger a buffer overflow by manipulating the wl_sec_set value in the payload, potentially crashing the process and causing a Denial of Service (DoS). ...

CVE-2025-50635

Netis WF2780 vulnerability CVE-2025-50635: a null pointer dereference in the FUN_0048a728 function of cgitest.cgi when CONTENT_LENGTH is manipulated. Affects Netis WF2780 v2.2.35445. Exploitation could crash the process and cause denial of service (DoS). Public details show the issue in the cgite...

CVE-2025-50616

Netis WF2880 v2.1.40207 is affected by a buffer overflow in the FUN_0046f984 function of the cgitest.cgi file. An attacker can trigger the issue by manipulating the wl_advanced_set value in the payload, potentially causing a crash and Denial of Service. The PT-2025-33032 advisory notes that updat...

CVE-2025-50613

Netis WF2880 v2.1.40207 contains a buffer overflow in FUN_00475e1c of cgitest.cgi that can be triggered by controlling wds_key_wep in the payload, potentially causing a Denial of Service. The issue is identified as CVE-2025-50613. Affected product: Netis WF2880 (router). Root cause: buffer overfl...

CVE-2025-34117

A remote code execution vulnerability exists in multiple Netcore and Netis routers models with firmware released prior to August 2014 due to the presence of an undocumented backdoor listener on UDP port 53413. Exact version boundaries remain undocumented. An unauthenticated remote attacker can se...

CVE-2025-34117

A remote code execution vulnerability exists in multiple Netcore and Netis routers models with firmware released prior to August 2014 due to the presence of an undocumented backdoor listener on UDP port 53413. Exact version boundaries remain undocumented. An unauthenticated remote attacker can se...

CVE-2025-34117 Netcore / Netis Routers RCE via UDP Port 53413 Backdoor

A remote code execution vulnerability exists in multiple Netcore and Netis routers models with firmware released prior to August 2014 due to the presence of an undocumented backdoor listener on UDP port 53413. Exact version boundaries remain undocumented. An unauthenticated remote attacker can se...

CVE-2025-34117 Netcore / Netis Routers RCE via UDP Port 53413 Backdoor

A remote code execution vulnerability exists in multiple Netcore and Netis routers models with firmware released prior to August 2014 due to the presence of an undocumented backdoor listener on UDP port 53413. Exact version boundaries remain undocumented. An unauthenticated remote attacker can se...

CVE-2025-34117

CVE-2025-34117 describes a remote code execution via an undocumented backdoor listener on UDP port 53413 in Netcore/Netis routers with firmware released before August 2014. An unauthenticated attacker can send crafted UDP packets to execute commands, thanks to a hardcoded authentication mechanism...

Netis Netcore Router 安全漏洞

Netis Netcore Router is a series of routers from Netis. A security vulnerability exists in Netis Netcore Router that stems from the presence of an undocumented backdoor listener on UDP port 53413, which could lead to remote execution of arbitrary code...