Vendor/product archive

netis-systems / wf2780_firmware CVEs

Beta · best-effort

4 CVEs tagged to netis-systems / wf2780_firmware — 2 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to netis-systems vendor archive

CVE-2025-50635

Published Aug 13, 2025

A null pointer dereference vulnerability was discovered in Netis WF2780 v2.2.35445. The vulnerability exists in the FUN_0048a728 function of the cgitest.cgi file. Attackers can tr…

CVSS 7.5 · High

evidence mentions: 1
Buzz score: 16.4

Public PoC observed

Vendor/product tagsBeta · best-effort

CVE-2024-25851

Published Feb 22, 2024

Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the config_sequence parameter in other_para of cgitest.cgi.

CVSS 8.0 · High

Vendor/product tagsBeta · best-effort

CVE-2024-25850

Published Feb 22, 2024

Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the wps_ap_ssid5g parameter

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2021-26747

Published Feb 18, 2021

Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1