CVE-2020-7842

CVE-2020-7842 describes an improper input validation vulnerability affecting the Netis Korea D’live AP (WF2429TB) v1.1.10. The issue arises in the time setting via the ntpServerlp1 parameter, which can lead to arbitrary command injection and execution. The known impact is arbitrary code execution...

Netis Dlive AP WF2429TB Input Validation Error Vulnerability

The Netis Dlive AP WF2429TB is a device for wireless devices to access a wired network from Netis in South Korea. The device is often a generic term for wireless routers, wireless gateways, and wireless bridges. The Netis Korea D live AP suffers from an input validation error vulnerability that...

VulnCheck KEV: CVE-2019-19356

Netis WF2419 devices contains an unspecified vulnerability that allows an attacker to perform remote code execution as root through the router's web management page...

Unauthorized Access Vulnerability in Netis WF2501

NETIS SYSTEMS is part of the NETCORE Group and is headquartered in Shenzhen, China. An unauthorized access vulnerability exists in Netis WF2501, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Netis Series Routers

WF2419, WF2780, WF2412, WF2409E, WF2411 are router products from Netis Systems. An unauthorized access vulnerability exists in the Netis family of routers, which can be exploited by attackers to obtain sensitive information...

Netis WF2419 Remote Code Execution (CVE-2019-19356)

A remote code execution vulnerability exists in Netissystems wf2419 firmware 1.2.31805. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Netis E1+ 1.2.32533 Hardcoded Backdoor Account

Exploit Title: Netis E1+ 1.2.32533 - Backdoor Account root Date: 2020-04-25 Author: Besim ALTINOK Vendor Homepage: http://www.netis-systems.com Software Link: http://www.netis-systems.com/Suppory/downloads/dd/1/img/204 Version: V1.2.32533 Tested on: Netis E1+ V1.2.32533 Credit: İsmail BOZKURT...

Netis E1+ V1.2.32533 - Unauthenticated WiFi Password Leak Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Netis E1+ 1.2.32533 - Unauthenticated WiFi Password Leak Author: Besim ALTINOK Vendor Homepage: http://www.netis-systems.com Software Link: http://www.netis-systems.com/Suppory/downloads/dd/1/img/204 Version: V1.2.32533...

Netis E1+ 1.2.32533 - Backdoor Account (root) Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Netis E1+ 1.2.32533 - Backdoor Account root Author: Besim ALTINOK Vendor Homepage: http://www.netis-systems.com Software Link: http://www.netis-systems.com/Suppory/downloads/dd/1/img/204 Version: V1.2.32533 Tested on: Netis...

Netis E1+ 1.2.32533 Password Leak

Exploit Title: Netis E1+ 1.2.32533 - Unauthenticated WiFi Password Leak Date: 2020-04-25 Author: Besim ALTINOK Vendor Homepage: http://www.netis-systems.com Software Link: http://www.netis-systems.com/Suppory/downloads/dd/1/img/204 Version: V1.2.32533 Tested on: Netis E1+ V1.2.32533 Credit: İsmai...

Netis E1+ 1.2.32533 - Backdoor Account (root)

Exploit Title: Netis E1+ 1.2.32533 - Backdoor Account root Date: 2020-04-25 Author: Besim ALTINOK Vendor Homepage: http://www.netis-systems.com Software Link: http://www.netis-systems.com/Suppory/downloads/dd/1/img/204 Version: V1.2.32533 Tested on: Netis E1+ V1.2.32533 Credit: İsmail BOZKURT...

Netis E1+ V1.2.32533 - Unauthenticated WiFi Password Leak

Exploit Title: Netis E1+ 1.2.32533 - Unauthenticated WiFi Password Leak Date: 2020-04-25 Author: Besim ALTINOK Vendor Homepage: http://www.netis-systems.com Software Link: http://www.netis-systems.com/Suppory/downloads/dd/1/img/204 Version: V1.2.32533 Tested on: Netis E1+ V1.2.32533 Credit: İsmai...

Netis WF2419 2.2.36123 - Remote Code Execution

Netis WF2419 2.2.36123 - Remote Code Execution Exploit Title: Netis WF2419 2.2.36123 - Remote Code Execution Exploit Author: Elias Issa Vendor Homepage: http://www.netis-systems.com Software Link: http://www.netis-systems.com/Suppory/downloads/dd/1/img/75 Date: 2020-02-11 Version: WF2419 V2.2.361...

Netis WF2419 2.2.36123 Remote Code Execution

Exploit Title: Netis WF2419 2.2.36123 - Remote Code Execution Exploit Author: Elias Issa Vendor Homepage: http://www.netis-systems.com Software Link: http://www.netis-systems.com/Suppory/downloads/dd/1/img/75 Date: 2020-02-11 Version: WF2419 V2.2.36123 = V2.2.36123 Tested on: NETIS WF2419...

Netis WF2419 2.2.36123 - Remote Code Execution Exploit

Exploit for hardware platform in category web applications Exploit Title: Netis WF2419 2.2.36123 - Remote Code Execution Exploit Author: Elias Issa Vendor Homepage: http://www.netis-systems.com Software Link: http://www.netis-systems.com/Suppory/downloads/dd/1/img/75 Version: WF2419 V2.2.36123 =...

Netis WF2419 2.2.36123 - Remote Code Execution

Exploit Title: Netis WF2419 2.2.36123 - Remote Code Execution Exploit Author: Elias Issa Vendor Homepage: http://www.netis-systems.com Software Link: http://www.netis-systems.com/Suppory/downloads/dd/1/img/75 Date: 2020-02-11 Version: WF2419 V2.2.36123 = V2.2.36123 Tested on: NETIS WF2419...

CVE-2020-8946

Netis WF2471 v1.2.30142 devices allow an authenticated attacker to execute arbitrary OS commands via shell metacharacters in the /cgi-bin-igd/syslogclean.cgi log3gtype parameter...

CVE-2020-8946

Netis WF2471 v1.2.30142 devices allow an authenticated attacker to execute arbitrary OS commands via shell metacharacters in the /cgi-bin-igd/syslogclean.cgi log3gtype parameter...

Design/Logic Flaw

Netis WF2471 v1.2.30142 devices allow an authenticated attacker to execute arbitrary OS commands via shell metacharacters in the /cgi-bin-igd/syslogclean.cgi log3gtype parameter...

CVE-2020-8946

Netis WF2471 v1.2.30142 devices are affected by CVE-2020-8946 due to an authenticated attacker being able to execute arbitrary OS commands. The vulnerability stems from shell metacharacters in the log_3g_type parameter of the /cgi-bin-igd/sys_log_clean.cgi endpoint, enabling command execution wit...