9347 matches found
CVE-2025-2922 Netis WF-2404 BusyBox Shell cleartext storage
A vulnerability classified as problematic was found in Netis WF-2404 1.1.124EN. Affected by this vulnerability is an unknown functionality of the component BusyBox Shell. The manipulation leads to cleartext storage of sensitive information. It is possible to launch the attack on the physical...
CVE-2025-2922
CVE-2025-2922 affects Netis WF-2404 (firmware 1.1.124EN). The vulnerability involves an unknown BusyBox Shell functionality and results in cleartext storage of sensitive information when the attacker has physical access to the device. The attack vector is physical with HIGH complexity and require...
CVE-2025-2921
A vulnerability classified as critical has been found in Netis WF-2404 1.1.124EN. Affected is an unknown function of the file /etc/passwd. The manipulation with the input Realtek leads to use of default password. It is possible to launch the attack on the physical device. The complexity of an...
CVE-2025-2919
A vulnerability was found in Netis WF-2404 1.1.124EN. It has been declared as critical. This vulnerability affects unknown code of the component UART. The manipulation leads to hardware allows activation of test or debug logic at runtime. It is possible to launch the attack on the physical device...
CVE-2025-2921 Netis WF-2404 passwd default password
A vulnerability classified as critical has been found in Netis WF-2404 1.1.124EN. Affected is an unknown function of the file /etc/passwd. The manipulation with the input Realtek leads to use of default password. It is possible to launch the attack on the physical device. The complexity of an...
CVE-2025-2921 Netis WF-2404 passwd default password
A vulnerability classified as critical has been found in Netis WF-2404 1.1.124EN. Affected is an unknown function of the file /etc/passwd. The manipulation with the input Realtek leads to use of default password. It is possible to launch the attack on the physical device. The complexity of an...
CVE-2025-2921
Netis WF-2404 (version 1.1.124EN) is affected by CVE-2025-2921, involving an unknown function in the /etc/passwd file. Reports indicate that manipulating input labeled as Realtek can cause the device to rely on a default password, enabling an attack on the physical device. The CVE’s access vector...
CVE-2025-2920 Netis WF-2404 passwd weak hash
A vulnerability was found in Netis WF-2404 1.1.124EN. It has been rated as problematic. This issue affects some unknown processing of the file /еtc/passwd. The manipulation leads to use of weak hash. It is possible to launch the attack on the physical device. The complexity of an attack is rather...
CVE-2025-2919 Netis WF-2404 UART hardware allows activation of test or debug logic at runtime
A vulnerability was found in Netis WF-2404 1.1.124EN. It has been declared as critical. This vulnerability affects unknown code of the component UART. The manipulation leads to hardware allows activation of test or debug logic at runtime. It is possible to launch the attack on the physical device...
CVE-2025-2919 Netis WF-2404 UART hardware allows activation of test or debug logic at runtime
A vulnerability was found in Netis WF-2404 1.1.124EN. It has been declared as critical. This vulnerability affects unknown code of the component UART. The manipulation leads to hardware allows activation of test or debug logic at runtime. It is possible to launch the attack on the physical device...
SUSE CVE-2023-52985
In the Linux kernel, the following vulnerability has been resolved: arm64: dts: imx8mm-verdin: Do not power down eth-phy Currently if suspending using either freeze or memory state, the fec driver tries to power down the phy which leads to crash of the kernel and non-responsible kernel with the...
PT-2025-13557 · Netis · Netis Wf-2404
Name of the Vulnerable Software and Affected Versions: Netis WF-2404 version 1.1.124EN Description: A critical issue affects the UART component, allowing activation of test or debug logic at runtime through physical device manipulation. The vendor was contacted about this disclosure but did not...
PT-2025-13559 · Netis · Netis Wf-2404
Name of the Vulnerable Software and Affected Versions: Netis WF-2404 version 1.1.124EN Description: A critical issue has been discovered, affecting an unknown function of the file /etc/passwd. The manipulation with the input Realtek leads to the use of a default password. It is possible to launch...
Netis Systems WF-2404 安全漏洞
The Netis Systems WF-2404 is a wireless router from Netis Systems. A security vulnerability exists in the Netis Systems WF-2404 version 1.1.124EN, which stems from weak hash usage and requires physical device access...
Netis Systems WF-2404 安全漏洞
The Netis Systems WF-2404 is a wireless router from Netis Systems. A security vulnerability exists in the Netis Systems WF-2404 version 1.1.124EN that originates from a hardware test or debug logic activation that requires physical device access...
Netis Systems WF-2404 安全漏洞
Netis Systems WF-2404 is a wireless router from Netis Systems. A security vulnerability exists in the Netis Systems WF-2404 version 1.1.124EN, which stems from the use of a default password that requires physical device access...
DEBIAN-CVE-2023-52985
In the Linux kernel, the following vulnerability has been resolved: arm64: dts: imx8mm-verdin: Do not power down eth-phy Currently if suspending using either freeze or memory state, the fec driver tries to power down the phy which leads to crash of the kernel and non-responsible kernel with the...
UBUNTU-CVE-2023-52985
In the Linux kernel, the following vulnerability has been resolved: arm64: dts: imx8mm-verdin: Do not power down eth-phy Currently if suspending using either freeze or memory state, the fec driver tries to power down the phy which leads to crash of the kernel and non-responsible kernel with the...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the mdio unvalidated phy address parameter...
