648 matches found
PT-2023-16021 · Netis · Netis Netcore Router
Name of the Vulnerable Software and Affected Versions: Netis Netcore Router versions up to 2.2.6 Description: A vulnerability was found in the Netis Netcore Router, affecting an unknown functionality of the file param.file.tgz of the component Backup Handler. This leads to information disclosure...
Netis Netcore Router 安全漏洞
The Netis Netcore Router is a series of routers from Netis. The Netis Netcore Router has a security vulnerability that stems from the use of hard-coded passwords...
Netis Netcore Router 安全漏洞
The Netis Netcore Router is a series of routers from Netis. A security vulnerability exists in the Netis Netcore Router that stems from some unknown functionality in the param.file.tgz file of its Backup Handler component that results in storing data in plaintext in a file or on disk...
PT-2023-6842 · Netis · Netis Netcore Router
Name of the Vulnerable Software and Affected Versions: Netis Netcore Router affected versions not specified Description: The issue is related to the Backup Handler component of the Netis Netcore Router, specifically with the file param.file.tgz. It involves the cleartext storage of critical...
Netis Netcore Router 信息泄露漏洞
The Netis Netcore Router is a series of routers from Netis. The Netis Netcore Router suffers from an information disclosure vulnerability that stems from an unknown function in the param.file.tgz file of its Backup Handler component causing an attacker to achieve information disclosure...
CVE-2021-26621 Netis Korea MEX01 Buffer overflow vulnerability
An Buffer Overflow vulnerability leading to remote code execution was discovered in MEX01. Remote attackers can use this vulnerability by using the property that the target program copies parameter values to memory through the strcpy function...
Netis Systems Netis MEX01 安全漏洞
The Netis Systems Netis MEX01 is a router from the Chinese company Netis Systems. A security vulnerability exists in Netis MEX01, which is caused by a buffer overflow vulnerability in the software. The vulnerability can be exploited by an attacker via the strcpy function that copies parameter...
netis-systems.com Cross Site Scripting vulnerability OBB-2339703
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The vulnerability of the ping and tracert commands implemented in the web interface for managing Netis WF2419 router microprogramming software allows a perpetrator to execute arbitrary commands and gain unauthorized access to protected information.
The vulnerability of the ping and tracert commands in the web interface for managing Netis WF2419 microprogramming devices relates to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands and gain...
Netis WF2419 Devices Remote Code Execution Vulnerability
Netis WF2419 devices contains an unspecified vulnerability that allows an attacker to perform remote code execution as root through the router's web management page...
New Mirai Variant and ZHtrap Botnet Malware Emerge in the Wild
Cybersecurity researchers on Monday disclosed a new wave of ongoing attacks exploiting multiple vulnerabilities to deploy new Mirai variants on internet connected devices. "Upon successful exploitation, the attackers try to download a malicious shell script, which contains further infection...
CVE-2021-26747
Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution...
CVE-2021-26747
Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution...
CVE-2021-26747
Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution...
Design/Logic Flaw
Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution...
CVE-2021-26747
The CVE-2021-26747 entry affects Netis devices: WF2780 (version 2.3.40404) and WF2411 (version 1.1.29629). The connected sources describe a vulnerability where shell metacharacters in the ping command enable remote code execution. This is the explicit attack vector and impact stated in multiple r...
CVE-2021-26747
Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution...
Netis WF2780 Operating System Command Injection Vulnerability
Netis WF2780 is a networking device from Netis China. Provides AC routers to deliver next-generation Wi-Fi at gigabit speeds. An operating system command injection vulnerability exists in the Netis WF2780 and WF2411. The vulnerability originates from allowing an attacker to inject shell...
CVE-2020-7842
Improper Input validation vulnerability exists in Netis Korea D'live AP which could cause arbitrary command injection and execution when the time setting using ntpServerlp1 parameter for the users. This affects D'live set-top box APWF2429TB v1.1.10...
Input validation
Improper Input validation vulnerability exists in Netis Korea D'live AP which could cause arbitrary command injection and execution when the time setting using ntpServerlp1 parameter for the users. This affects D'live set-top box APWF2429TB v1.1.10...