Lucene search

N3M Firmware Security Vulnerabilities - CVSS Score 9 - 10

cve

CVE-2023-43891

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the Changing Username and Password function. This vulnerability is exploited via a crafted payload.

9.8CVSS

9.5AI Score

0.013EPSS

2023-10-02 10:15 PM

cve

CVE-2023-43892

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the WAN settings. This vulnerability is exploited via a crafted payload.

9.8CVSS

9.6AI Score

0.001EPSS

2023-10-02 10:15 PM

cve

CVE-2023-43893

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the wakeup_mac parameter in the Wake-On-LAN (WoL) function. This vulnerability is exploited via a crafted payload.

9.8CVSS

9.5AI Score

0.001EPSS

2023-10-02 10:15 PM

cve

CVE-2023-45465

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ddnsDomainName parameter in the Dynamic DNS settings.

9.8CVSS

9.7AI Score

0.013EPSS

2023-10-13 01:15 PM

cve

CVE-2023-45467

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ntpServIP parameter in the Time Settings.

9.8CVSS

9.7AI Score

0.001EPSS

2023-10-13 01:15 PM