CVE-2021-26747

Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution...

Arbitrary Command Injection Over HTTP Traffic (CVE-2020-19165; CVE-2020-24219; CVE-2020-28477; CVE-2021-26747; CVE-2021-27328)

Arbitrary Command Injection Over HTTP Traffic...

CVE-2021-26747

Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution...

CVE-2021-26747

The CVE-2021-26747 entry affects Netis devices: WF2780 (version 2.3.40404) and WF2411 (version 1.1.29629). The connected sources describe a vulnerability where shell metacharacters in the ping command enable remote code execution. This is the explicit attack vector and impact stated in multiple r...