27 matches found
CVE-2025-50616
Netis WF2880 v2.1.40207 is affected by a buffer overflow in the FUN_0046f984 function of the cgitest.cgi file. An attacker can trigger the issue by manipulating the wl_advanced_set value in the payload, potentially causing a crash and Denial of Service. The PT-2025-33032 advisory notes that updat...
CVE-2025-50615
A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN00470c50 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wlmacfilterset in the payload, which can cause the program to crash and lead to a Denial of...
CVE-2025-50613
Netis WF2880 v2.1.40207 contains a buffer overflow in FUN_00475e1c of cgitest.cgi that can be triggered by controlling wds_key_wep in the payload, potentially causing a Denial of Service. The issue is identified as CVE-2025-50613. Affected product: Netis WF2880 (router). Root cause: buffer overfl...
CVE-2025-50615
A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN00470c50 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wlmacfilterset in the payload, which can cause the program to crash and lead to a Denial of...
CVE-2025-50609
A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the Function00465620 of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of specifyparame in the payload, which can cause the program to crash and potentially lead to a Denial ...
Netis Systems WF2880 安全漏洞
The Netis Systems WF2880 is a dual-band gigabit wireless router from Netis Systems. A security vulnerability exists in the Netis Systems WF2880 version v2.1.40207 that stems from a null pointer dereference in the cgitest.cgi file, which could lead to a denial of service...
CVE-2025-45835
A null pointer dereference vulnerability was discovered in Netis WF2880 v2.1.40207. The vulnerability exists in the FUN004904c8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the environment variable value CONTENTLENGTH, causing the program to crash and...