CVE-2025-50609

A buffer overflow vulnerability exists in the Netis WF2880 wireless router (version v2.1.40207 ) within the Function_00465620 function of the cgitest.cgi file. Attackers can trigger this flaw by controlling the specify_parame variable in the payload, which can cause the program to crash and lead ...

CVE-2025-50615

A buffer overflow vulnerability exists in the Netis WF2880 wireless router, specifically within the FUN_00470c50 function of the cgitest.cgi file in version v2.1.40207 . An attacker can trigger this flaw by controlling the wl_mac_filter_set value in the payload, which may cause the program to cra...

CVE-2025-50635: NULL Pointer Dereference

A null pointer dereference vulnerability was discovered in Netis WF2780 v2.2.35445. The vulnerability exists in the FUN0048a728 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the CONTENTLENGTH variable, causing the program to crash and potentially leadin...

Netis WF2880 安全漏洞

The Netis WF2880 is a wireless router from the Chinese company Netis. The Netis WF2880 FUN0046f984 function buffer overflow vulnerability can be exploited by an attacker to cause a denial of service...

CVE-2025-50608

A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN00471994 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wlbaseset in the payload, which can cause the program to crash and potentially lead to a Denial ...

PT-2025-33012 · Netis · Netis Wf2780

Name of the Vulnerable Software and Affected Versions: Netis WF2780 version 2.2.35445 Description: A null pointer dereference issue exists in the FUN 0048a728 function within the cgitest.cgi file. Exploitation involves controlling the CONTENT LENGTH variable, which can lead to a denial-of-service...

CVE-2025-50617

A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN0046ed68 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wpsset in the payload, which can cause the program to crash and potentially lead to a Denial of...

Netis WF2880 安全漏洞

The Netis WF2880 is a wireless router from the Chinese company Netis. A buffer overflow vulnerability exists in the Netis WF2880 FUN0047151c function, which can be exploited by an attacker to cause a denial of service attack...

Netis WF2780 安全漏洞

Netis WF2780 is a networking device from Netis Inc. Provides AC routers to deliver next-generation Wi-Fi at gigabit speeds. A security vulnerability exists in the Netis WF2780 version v2.2.35445, which stems from the FUN0048a728 function in the cgitest.cgi file not handling the CONTENTLENGTH...

PT-2025-33010 · Netis · Netis Wf2880

Name of the Vulnerable Software and Affected Versions: Netis WF2880 version 2.1.40207 Description: A buffer overflow vulnerability exists in the Function 00465620 function of the cgitest.cgi file. Attackers can trigger this issue by controlling the specify parame variable within the payload,...

Netis WF2880 安全漏洞

The Netis WF2880 is a wireless router from the Chinese company Netis. A buffer overflow vulnerability exists in the Netis WF2880 FUN00471994 function, which can be exploited by an attacker to cause a denial of service...

Netis WF2880 安全漏洞

The Netis WF2880 is a wireless router from the Chinese company Netis. A buffer overflow vulnerability exists in the Netis WF2880 Function00465620 function, which can be exploited by an attacker to cause a denial of service...

PT-2025-33031 · Netis · Netis Wf2880

Name of the Vulnerable Software and Affected Versions: Netis WF2880 version 2.1.40207 Description: A buffer overflow issue exists in the FUN 00470c50 function of the cgitest.cgi file. An attacker can trigger this issue by controlling the wl mac filter set value within the payload, potentially...

CVE-2025-50612

A buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the FUN004743f8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wlsecset in the payload, which may cause the program to crash and potentially lead to a Deni...

CVE-2025-34117

A remote code execution vulnerability exists in multiple Netcore and Netis routers models with firmware released prior to August 2014 due to the presence of an undocumented backdoor listener on UDP port 53413. Exact version boundaries remain undocumented. An unauthenticated remote attacker can se...

CVE-2025-34117

A remote code execution vulnerability exists in multiple Netcore and Netis routers models with firmware released prior to August 2014 due to the presence of an undocumented backdoor listener on UDP port 53413. Exact version boundaries remain undocumented. An unauthenticated remote attacker can se...

CVE-2025-34117 Netcore / Netis Routers RCE via UDP Port 53413 Backdoor

A remote code execution vulnerability exists in multiple Netcore and Netis routers models with firmware released prior to August 2014 due to the presence of an undocumented backdoor listener on UDP port 53413. Exact version boundaries remain undocumented. An unauthenticated remote attacker can se...

CVE-2025-34117 Netcore / Netis Routers RCE via UDP Port 53413 Backdoor

A remote code execution vulnerability exists in multiple Netcore and Netis routers models with firmware released prior to August 2014 due to the presence of an undocumented backdoor listener on UDP port 53413. Exact version boundaries remain undocumented. An unauthenticated remote attacker can se...

CVE-2025-34117

CVE-2025-34117 describes a remote code execution via an undocumented backdoor listener on UDP port 53413 in Netcore/Netis routers with firmware released before August 2014. An unauthenticated attacker can send crafted UDP packets to execute commands, thanks to a hardcoded authentication mechanism...

CVE-2025-34117: Hidden Functionality

A remote code execution vulnerability exists in multiple Netcore and Netis routers models with firmware released prior to August 2014 due to the presence of an undocumented backdoor listener on UDP port 53413. Exact version boundaries remain undocumented. An unauthenticated remote attacker can se...