PT-2025-33015 · Netis · Netis Wf2880

Name of the Vulnerable Software and Affected Versions: Netis WF2880 version 2.1.40207 Description: A buffer overflow issue exists in the FUN 00475e1c function of the cgitest.cgi file. Attackers can exploit this by controlling the wds key wep variable within the payload, potentially causing a Deni...

CVE-2025-50613

Netis WF2880 v2.1.40207 contains a buffer overflow in FUN_00475e1c of cgitest.cgi that can be triggered by controlling wds_key_wep in the payload, potentially causing a Denial of Service. The issue is identified as CVE-2025-50613. Affected product: Netis WF2880 (router). Root cause: buffer overfl...

CVE-2025-50612

The vulnerability CVE-2025-50612 affects Netis WF2880 firmware v2.1.40207, specifically the FUN_004743f8 function in cgitest.cgi. An attacker can trigger a buffer overflow by manipulating the wl_sec_set value in the payload, potentially crashing the process and causing a Denial of Service (DoS). ...

CVE-2025-50615

A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN00470c50 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wlmacfilterset in the payload, which can cause the program to crash and lead to a Denial of...

CVE-2025-50613

A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN00475e1c function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wdskeywep in the payload, which can cause the program to crash and potentially lead to a Denial ...

Netis Systems WF2880 安全漏洞

The Netis Systems WF2880 is a dual-band gigabit wireless router from Netis Systems. A security vulnerability exists in the Netis Systems WF2880 version v2.1.40207 that stems from a null pointer dereference in the cgitest.cgi file, which could lead to a denial of service...

CVE-2025-45835

A null pointer dereference vulnerability was discovered in Netis WF2880 v2.1.40207. The vulnerability exists in the FUN004904c8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the environment variable value CONTENTLENGTH, causing the program to crash and...