Netis Systems

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-45468 1Netis Systems 1N3m Firmware Jun 17, 2026 Oct 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the pingWdogIp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2023-45467 1Netis Systems 1N3m Firmware Jun 17, 2026 Oct 13, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ntpServIP parameter in the Time Settings.
CVE-2023-45466 1Netis Systems 1N3mv2 Firmware Jun 17, 2026 Oct 13, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the pin_host parameter in the WPS Settings.
CVE-2023-45465 1Netis Systems 1N3m Firmware Jun 17, 2026 Oct 13, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ddnsDomainName parameter in the Dynamic DNS settings.
CVE-2023-45464 1Netis Systems 1N3m Firmware Jun 17, 2026 Oct 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the servDomain parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2023-45463 1Netis Systems 1N3m Firmware Jun 17, 2026 Oct 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the hostName parameter in the FUN_0040dabc function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2023-44860 1Netis Systems 1N3m Firmware Jun 17, 2026 Oct 6, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue in NETIS SYSTEMS N3Mv2 v.1.0.1.865 allows a remote attacker to cause a denial of service via the authorization component in the HTTP request.
CVE-2023-43893 1Netis Systems 1N3m Firmware Jun 17, 2026 Oct 2, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the wakeup_mac parameter in the Wake-On-LAN (WoL) function. This vulnerability is exploited via a crafted payload.
CVE-2023-43892 1Netis Systems 1N3m Firmware Jun 17, 2026 Oct 2, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the WAN settings. This vulnerability is exploited via a crafted payload.
CVE-2023-43891 1Netis Systems 1N3m Firmware Jun 17, 2026 Oct 2, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the Changing Username and Password function. This vulnerability is exploited via a crafted payload.
CVE-2023-43890 1Netis Systems 1N3m Firmware Jun 17, 2026 Oct 2, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the diagnostic tools page. This vulnerability is exploited via a crafted HTTP request.
CVE-2023-43134 1Netis Systems 1360r Firmware Jun 17, 2026 Sep 20, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the d...Show more There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management.Show less
CVE-2023-42336 1Netis Systems 1Wf2409e Firmware Jun 17, 2026 Sep 16, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via the password parameter in the /etc/shadow.sample component.
CVE-2023-38829 1Netis Systems 1Wf2409e Firmware Jun 17, 2026 Sep 11, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of the diagnostic tools component in the admin management interface.
CVE-2023-0114 1Netis Systems 1Netcore Router Firmware Jun 17, 2026 Jan 7, 2023 N/A· v4 5.5 MEDIUM· v3 1.7 LOW· v2 A vulnerability was found in Netis Netcore Router. It has been rated as problematic. Affected by this issue is some unknown functionality of the file param.file.tgz of the component Backup Handler. The manipulation leads...Show more A vulnerability was found in Netis Netcore Router. It has been rated as problematic. Affected by this issue is some unknown functionality of the file param.file.tgz of the component Backup Handler. The manipulation leads to cleartext storage in a file or on disk. Local access is required to approach this attack. The identifier of this vulnerability is VDB-217592.Show less
CVE-2023-0113 1Netis Systems 1Netcore Router Firmware Jun 17, 2026 Jan 7, 2023 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A vulnerability was found in Netis Netcore Router up to 2.2.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file param.file.tgz of the component Backup Handler. T...Show more A vulnerability was found in Netis Netcore Router up to 2.2.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file param.file.tgz of the component Backup Handler. The manipulation leads to information disclosure. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-217591.Show less
CVE-2018-25069 1Netis Systems 1Netcore Router Firmware Nov 21, 2024 Jan 7, 2023 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A vulnerability classified as critical has been found in Netis Netcore Router. This affects an unknown part. The manipulation leads to use of hard-coded password. It is possible to initiate the attack remotely. The ident...Show more A vulnerability classified as critical has been found in Netis Netcore Router. This affects an unknown part. The manipulation leads to use of hard-coded password. It is possible to initiate the attack remotely. The identifier VDB-217593 was assigned to this vulnerability.Show less
CVE-2021-26747 1Netis Systems 2Wf2411 Firmware Wf2780 Firmware Jun 17, 2026 Feb 18, 2021 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution.
CVE-2020-8946 1Netis Systems 1Wf2471 Firmware Jun 17, 2026 Feb 12, 2020 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 Netis WF2471 v1.2.30142 devices allow an authenticated attacker to execute arbitrary OS commands via shell metacharacters in the /cgi-bin-igd/sys_log_clean.cgi log_3g_type parameter.
CVE-2019-19356 1Netis Systems 1Wf2419 Firmware Jun 17, 2026 Feb 7, 2020 N/A· v4 7.5 HIGH· v3 8.5 HIGH· v2 Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. The vulnerability has been found in firmware version V1.2.31805 and V2.2.36123. After one is connect...Show more Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. The vulnerability has been found in firmware version V1.2.31805 and V2.2.36123. After one is connected to this page, it is possible to execute system commands as root through the tracert diagnostic tool because of lack of user input sanitizing.Show less

Previous 123 Next