4 matches found
CVE-2021-26747
Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution...
10CVSS8AI score0.53598EPSS
SaveExploits1References1
Arbitrary Command Injection Over HTTP Traffic (CVE-2020-19165; CVE-2020-24219; CVE-2020-28477; CVE-2021-26747; CVE-2021-27328)
Arbitrary Command Injection Over HTTP Traffic...
10CVSS1.2AI score0.53598EPSS
SaveExploits10
CVE-2021-26747
The CVE-2021-26747 entry affects Netis devices: WF2780 (version 2.3.40404) and WF2411 (version 1.1.29629). The connected sources describe a vulnerability where shell metacharacters in the ping command enable remote code execution. This is the explicit attack vector and impact stated in multiple r...
10CVSS9.9AI score0.53598EPSS
SaveExploits1References2Affected Software1
20