NETIS SYSTEMS N3 Command Injection Vulnerability

NETIS SYSTEMS N3 is a router from NETIS SYSTEMS. A command injection vulnerability exists in the Netis N3Mv2-V.1.0.1.865 version, which stems from a command injection vulnerability in the Changing Username and Password function...

CVE-2023-43892

The CVE-2023-43892 issue affects Netis N3Mv2-V1.0.1.865, where a command injection vulnerability exists in the Hostname parameter of WAN settings. The root cause, as described across sources, is that a crafted payload can trigger command execution, yielding potential high impact to confidentialit...

CVE-2023-43893

CVE-2023-43893 concerns Netis N3Mv2-V1.0.1.865, where the Wake-On-LAN (WoL) function’s wakeup_mac parameter is vulnerable to command injection via a crafted payload. The issue is described across multiple sources (NVD, Red Hat, CVE List, CNNVD, etc.) as a router/network device vulnerability with ...

CVE-2023-43134

There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...

CVE-2023-43134

There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...

CVE-2023-43134

There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...

Design/Logic Flaw

There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...

CVE-2023-43134

There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...

CVE-2023-43134

There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...

CVE-2023-43134

Affected product: Netis 360RAC1200 (v1.3.4517). The CVE denotes an unauthorized access vulnerability that lets an attacker obtain device-sensitive information, steal user tokens, and log in to the device backend management without authentication. The issue is rated base-score 9.8 (CRITICAL) by NV...

Netis 360RAC1200 Security Vulnerability

Netis 360RAC1200 is a router from Netis. A security vulnerability exists in the Netis 360RAC1200 that stems from the presence of an unauthorized access vulnerability...

PT-2023-28710 · Netis · Netis 360Rac1200

Name of the Vulnerable Software and Affected Versions: Netis 360RAC1200 version 1.3.4517 Description: The issue allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management. Recommendations: For...

CVE-2023-42336

An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via the password parameter in the /etc/shadow.sample component...

CVE-2023-42336

An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via the password parameter in the /etc/shadow.sample component...

Design/Logic Flaw

An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via the password parameter in the /etc/shadow.sample component...

PT-2023-28321 · Netis Systems · Netis Systems Wf2409Ev4

Name of the Vulnerable Software and Affected Versions: NETIS SYSTEMS WF2409Ev4 version 1.0.1.705 Description: The issue allows a remote attacker to execute arbitrary code and obtain sensitive information. This is achieved via the password parameter in the "/etc/shadow.sample" component...

CVE-2023-42336

An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via the password parameter in the /etc/shadow.sample component...

CVE-2023-42336

The CVE-2023-42336 entry describes a remote-code-execution and information-disclosure flaw in NETIS SYSTEMS WF2409Ev4 v1.0.1.705, exploitable via the password parameter in /etc/shadow.sample. The NVD metrics show a CVSS v3.1 base score of 9.8 (NETWORK, HIGH impact to confidentiality, integrity, a...

NETIS SYSTEMS WF2409E Trust Management Issues Vulnerability

NETIS SYSTEMS WF2409E is a wireless router from NETIS SYSTEMS. A security vulnerability exists in the NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 version that originates from obtaining sensitive information via the password parameter in the /etc/shadow.sample component...

CVE-2023-38829

An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of the diagnostic tools component in the admin management interface...