CVE-2024-25851

The Netis WF2780 networking device, specifically version v2.1.40144 , is susceptible to a command injection vulnerability. The flaw exists within the cgitest.cgi endpoint, where the config_sequence parameter in other_para fails to properly neutralize special elements used in OS commands. This vul...