CVE-2023-38829-NETIS-WF2409E

CVE-2023-38829-NETIS-WF2409E NETIS SYSTEMS ルーター WF2409E コマンドインジェクション PoC 脆弱性の説明: NETIS SYSTEMS ルーター WF2409E（バージョン V3.6.42541）の ping および traceroute 機能は、コマンドインジェクション攻撃に対して脆弱です。Web 管理インターフェースを介してこれらの機能のパラメータに悪意ある入力を仕込むことができ、影響を受けるプロセスの権限で任意のコマンドを実行できるようになります。 PoC 手順: 1. ターゲットを特定する: NETIS SYSTEMS ルータ...

Netis-N5VN-AC1200-DOS

漏洞标题：Netis N5VN AC1200 - 缓冲区溢出 DoS（拒绝服务） 日期：05/03/2024 漏洞作者：Van Lam Nguyen Facebook：fb.com/vanlam1412 厂商主页：Netis Systems 版本：Netis N5VN AC1200 V1.0.1.1742 测试环境：Windows CVE：CVE-2024-44596 概述 Netis N5VN AC1200 路由器存在缓冲区溢出漏洞，攻击者可通过发送精心构造的请求，使路由器上运行的 Web 服务器崩溃。 要恢复 http（Web 服务器），用户必须手动重启路由器。 概念验证（使用...

CVE-2023-38829-NETIS-WF2409E_Report

Netis WF2409E デバイスレポート 1. デバイス概要 1.1 主要仕様表 カテゴリ| パラメータ| 説明 ---|---|--- デバイス情報| モデル| Netis WF2409E | タイプ| 300Mbps Wireless N Router | 電源| DC 9V/500mA | ハードウェアバージョン| V1.8 | PCBバージョン| PB-7189-M02G-20 | 製造日| 2015-03-23 | 製造国| 中国 ネットワーク識別子| シリアル番号| 2409EEU5B102714 V1.8 | MACアドレス| W8D398DFB68 |...

CVE-2026-76071

CVE-2026-76071: Unauthenticated Pre-Auth Stack Buffer Overflow via sscanf %^, in skkset.cgi ipFilterList Handler in Netis NC63 Researcher: Özcan Ersan @ozcanpng Disclosure status CVE: CVE-2026-76071 Vendor: Netis Systems Co., Ltd. Product: Netis NC63 AC1200 Wireless Dual Band Gigabit MU-MIMO Rout...

CVE-2019-8985

用于 CVE–2019–8985 Netis WF2411 RCE 研究的固件和exp :...

Netis Wifi Router - Information Disclosure

An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3503 and Netis Wifi 11AC Router NC21 3.0.0.3800, 3.0.0.3500 and 3.0.0.3329 and Netis Wifi Router MW5360 1.0.1.3442 and 1.0.1.3031 allows a...

CVE-2026-73673

CVE-2026-73673: Netis NC63 未经验证的固件更新，且缺少加密固件认证 原始漏洞研究由 Özcan Ersan @ozcanpng 完成。 本仓库记录了由作者发现并报告的 CVE-2026-73673。 CVE-2026-73673 的非破坏性概念验证与证据包。 Netis NC63 固件 V3.0.0.3327 暴露了特权固件更新端点 /cgi-bin/uploadfw.cgi，但未强制要求经过认证的管理员会话。此外，上传固件的处理流程对于提供给更新程序的固件也缺乏足够的加密固件认证。 受影响产品 字段| 值 ---|--- 厂商| Netis Systems...

CVE-2026-76070

CVE-2026-76070: Unauthenticated Pre-Auth Stack Buffer Overflow via Base64-Decoded Password in Netis NC63 login.cgi Leading to RCE Researcher: Özcan Ersan @ozcanpng Disclosure status CVE: CVE-2026-76070 Vendor: Netis Systems Co., Ltd. Product: Netis NC63 Wireless AC1200 Router Tested firmware:...

CVE-2019-19356

NETIS路由器 WF2419 RCE CVE-2019-19356 背景 该漏洞是通过NETIS WF2419 路由器Web管理页面进行的经过身份验证的远程代码执行（RCE）漏洞，并以root权限执行。 该漏洞已在固件版本V1.2.31805和最新的可用固件版本V2.2.36123中发现。其他型号和固件也可能存在漏洞。 前提条件 为了利用该漏洞，需要满足几个前提条件。实际上，我们需要能够访问路由器的Web管理页面。此外，如果启用了身份验证，我们需要通过尝试弱密码/默认密码、执行中间人攻击或任何其他方式进行身份验证。 漏洞详情...

Netis MW5360 V1.0.1.3031 - Command Injection

NETIS SYSTEMS MW5360 V1.0.1.3031 was discovered to contain a command injection vulnerability via the password parameter on the login page. id: CVE-2024-22729 info: name: Netis MW5360 V1.0.1.3031 - Command Injection author: pussycat0x severity: critical description: | NETIS SYSTEMS MW5360...

CVE-2026-61516

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the administrator password by sending a request to the sysinfo action in the web management interface without a valid session. Attackers can replay the...

CVE-2026-61517

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an OS command injection vulnerability in the ping diagnostic handler that allows authenticated administrators to execute arbitrary shell commands as root by injecting into the IpAddr parameter. The parameter is interpolated directly into a...

CVE-2026-61517 Netis NX10 OS Command Injection via Ping Diagnostic Handler

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an OS command injection vulnerability in the ping diagnostic handler that allows authenticated administrators to execute arbitrary shell commands as root by injecting into the IpAddr parameter. The parameter is interpolated directly into a...

CVE-2026-61517

Netis NX10 firmware versions V4.0.1.5808 and V3.0.0.4142 contain an OS command injection vulnerability in the ping diagnostic handler . An authenticated administrator can inject into the IpAddr parameter, which is interpolated directly into a shell command executed via system() . Input validation...

EUVD-2026-72808

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an OS command injection vulnerability in the ping diagnostic handler that allows authenticated administrators to execute arbitrary shell commands as root by injecting into the IpAddr parameter. The parameter is interpolated directly into a...

CVE-2026-61517 Netis NX10 OS Command Injection via Ping Diagnostic Handler

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an OS command injection vulnerability in the ping diagnostic handler that allows authenticated administrators to execute arbitrary shell commands as root by injecting into the IpAddr parameter. The parameter is interpolated directly into a...

CVE-2026-61516 Netis NX10 Credential Disclosure via sysinfo Diagnostic Endpoint

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the administrator password by sending a request to the sysinfo action in the web management interface without a valid session. Attackers can replay the...

EUVD-2026-72805

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the administrator password by sending a request to the sysinfo action in the web management interface without a valid session. Attackers can replay the...

CVE-2026-61516

The Netis NX10 (firmware V4.0.1.5808 and V3.0.0.4142) contains an information disclosure vulnerability in the sysinfo diagnostic endpoint of its web management interface. An unauthenticated attacker can retrieve the administrator password by sending a request to this action without a valid sessio...

CVE-2026-61516 Netis NX10 Credential Disclosure via sysinfo Diagnostic Endpoint

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the administrator password by sending a request to the sysinfo action in the web management interface without a valid session. Attackers can replay the...