Description
An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of the diagnostic tools component in the admin management interface.
Exploits (2)
nomisec
WORKING POC
1 stars
by Victorique-123 · poc
https://github.com/Victorique-123/CVE-2023-38829-NETIS-WF2409E_Report
nomisec
WRITEUP
1 stars
by adhikara13 · poc
https://github.com/adhikara13/CVE-2023-38829-NETIS-WF2409E
References (1)
Core 1
Core References
Exploit, Third Party Advisory
https://github.com/adhikara13/CVE-2023-38829-NETIS-WF2409E
Scores
CVSS v3
8.8
EPSS
0.1416
EPSS Percentile
94.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
total
Details
CWE
CWE-77
Status
published
Products (1)
netis-systems/wf2409e_firmware
3.6.42541
Published
Sep 11, 2023
Tracked Since
Feb 18, 2026