CVE-2023-43134

There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...

CVE-2023-43134

There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...

CVE-2023-43134

Affected product: Netis 360RAC1200 (v1.3.4517). The CVE denotes an unauthorized access vulnerability that lets an attacker obtain device-sensitive information, steal user tokens, and log in to the device backend management without authentication. The issue is rated base-score 9.8 (CRITICAL) by NV...

PT-2023-28710 · Netis · Netis 360Rac1200

Name of the Vulnerable Software and Affected Versions: Netis 360RAC1200 version 1.3.4517 Description: The issue allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management. Recommendations: For...

Netis 360RAC1200 Security Vulnerability

Netis 360RAC1200 is a router from Netis. A security vulnerability exists in the Netis 360RAC1200 that stems from the presence of an unauthorized access vulnerability...

CVE-2023-42336

An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via the password parameter in the /etc/shadow.sample component...

CVE-2023-42336

An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via the password parameter in the /etc/shadow.sample component...

Design/Logic Flaw

An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via the password parameter in the /etc/shadow.sample component...

PT-2023-28321 · Netis Systems · Netis Systems Wf2409Ev4

Name of the Vulnerable Software and Affected Versions: NETIS SYSTEMS WF2409Ev4 version 1.0.1.705 Description: The issue allows a remote attacker to execute arbitrary code and obtain sensitive information. This is achieved via the password parameter in the "/etc/shadow.sample" component...

CVE-2023-42336: Use of Hard-coded Credentials

An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via the password parameter in the /etc/shadow.sample component...

CVE-2023-42336

An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via the password parameter in the /etc/shadow.sample component...

CVE-2023-42336

The CVE-2023-42336 entry describes a remote-code-execution and information-disclosure flaw in NETIS SYSTEMS WF2409Ev4 v1.0.1.705, exploitable via the password parameter in /etc/shadow.sample. The NVD metrics show a CVSS v3.1 base score of 9.8 (NETWORK, HIGH impact to confidentiality, integrity, a...

NETIS SYSTEMS WF2409E Trust Management Issues Vulnerability

NETIS SYSTEMS WF2409E is a wireless router from NETIS SYSTEMS. A security vulnerability exists in the NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 version that originates from obtaining sensitive information via the password parameter in the /etc/shadow.sample component...

CVE-2023-38829

An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of the diagnostic tools component in the admin management interface...

CVE-2023-38829

An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of the diagnostic tools component in the admin management interface...

CVE-2023-38829

An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of the diagnostic tools component in the admin management interface...

NETIS SYSTEMS WF2409E Command Injection Vulnerability

NETIS SYSTEMS WF2409E is a wireless router from NETIS SYSTEMS. A security vulnerability exists in the NETIS SYSTEMS WF2409E version v.3.6.42541 that originates from a vulnerability that allows an attacker to execute arbitrary code via the ping and traceroute functions in the management interface...

CVE-2023-38829

An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of the diagnostic tools component in the admin management interface...

CVE-2023-38829

This CVE affects NETIS SYSTEMS WF2409E v3.6.42541. The issue resides in the diagnostic tools component of the admin management interface, where the ping and traceroute functions can be abused by a remote attacker to execute arbitrary code. The Red Hat and CNNVD entries corroborate the same impact...

CVE-2023-38829: Improper Neutralization of Special Elements used in a Command

An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of the diagnostic tools component in the admin management interface...