Command injection

Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the wpsapssid5g parameter...

Command injection

Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the configsequence parameter in otherpara of cgitest.cgi...

Netis WF2780 Security Vulnerability

The Netis WF2780 is a networking device from Netis. Provides an AC router delivering next generation Wi-Fi at gigabit speeds. A security vulnerability exists in the Netis WF2780 version v2.1.40144, which stems from a command injection vulnerability via the wpsapssid5g parameter...

CVE-2024-25851

Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the configsequence parameter in otherpara of cgitest.cgi...

PT-2024-21164 · Netis · Netis Wf2780

Name of the Vulnerable Software and Affected Versions: Netis WF2780 version 2.1.40144 Description: A command injection issue was discovered via the config sequence parameter in other para of cgitest.cgi. This allows for potential command execution. Recommendations: For Netis WF2780 version...

CVE-2024-25851: Improper Neutralization of Special Elements used in an OS Command

Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the configsequence parameter in otherpara of cgitest.cgi...

CVE-2024-25851

The Netis WF2780 networking device, specifically version v2.1.40144 , is susceptible to a command injection vulnerability. The flaw exists within the cgitest.cgi endpoint, where the config_sequence parameter in other_para fails to properly neutralize special elements used in OS commands. This vul...

CVE-2024-25850

Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the wpsapssid5g parameter...

CVE-2024-25850

Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the wpsapssid5g parameter...

Netis WF2780 Security Vulnerability

The Netis WF2780 is a networking device from Netis. Provides AC routers to deliver next generation Wi-Fi at gigabit speeds. A security vulnerability exists in Netis WF2780 version v2.1.40144, which stems from a command injection vulnerability via the configsequence parameter in otherpara...

CVE-2024-25850: Improper Neutralization of Special Elements used in a Command

Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the wpsapssid5g parameter...

CVE-2024-25851

Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the configsequence parameter in otherpara of cgitest.cgi...

CVE-2024-25850

The Netis WF2780 (version v2.1.40144 ) is susceptible to a command injection vulnerability via the wps_ap_ssid5g parameter. This flaw allows for the execution of arbitrary commands on the device. While the vulnerability is confirmed, the provided documents do not specify a patched version or a di...

PT-2024-21163 · Netis · Netis Wf2780

Name of the Vulnerable Software and Affected Versions: Netis WF2780 version 2.1.40144 Description: The issue is related to a command injection vulnerability. This vulnerability can be exploited via the wps ap ssid5g parameter. Recommendations: For Netis WF2780 version 2.1.40144, avoid using the w...

CVE-2024-22729

NETIS SYSTEMS MW5360 V1.0.1.3031 was discovered to contain a command injection vulnerability via the password parameter on the login page...

CVE-2024-22729

NETIS SYSTEMS MW5360 V1.0.1.3031 was discovered to contain a command injection vulnerability via the password parameter on the login page...

Command injection

NETIS SYSTEMS MW5360 V1.0.1.3031 was discovered to contain a command injection vulnerability via the password parameter on the login page...

PT-2024-5052 · Netis Systems · Netis Systems Mw5360

Name of the Vulnerable Software and Affected Versions: NETIS SYSTEMS MW5360 version 1.0.1.3031 Description: The issue is related to a command injection vulnerability via the password parameter on the login page. This vulnerability may allow a remote attacker to execute arbitrary commands...

CVE-2024-22729

NETIS SYSTEMS MW5360 V1.0.1.3031 was discovered to contain a command injection vulnerability via the password parameter on the login page...

CVE-2024-22729

The NETIS SYSTEMS MW5360 4G LTE wireless router is vulnerable to command injection (CWE-77) in the web interface. The root cause is the improper handling of the password parameter on the login page. This allows unauthenticated remote attackers to execute arbitrary OS commands, potentially leading...