CVE-2024-22729

CRITICAL EXPLOITED NUCLEI

Netis MW5360 V1.0.1.3031 - Command Injection

Title source: nuclei
STIX 2.1

Exploitation Summary

CVE-2024-22729 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit, including a Metasploit module exploits/linux/http/netis_unauth_rce_cve_2024_22729. A Nuclei detection template is also available.

AI-analyzed exploit summary This Metasploit module exploits an unauthenticated command injection vulnerability in Netis MW5360 routers via the password parameter on the login page. The exploit uses base64-encoded commands to achieve remote code execution.

Description

NETIS SYSTEMS MW5360 V1.0.1.3031 was discovered to contain a command injection vulnerability via the password parameter on the login page.

Exploits (1)

metasploit WORKING POC EXCELLENT
rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/netis_unauth_rce_cve_2024_22729.rb

This Metasploit module exploits an unauthenticated command injection vulnerability in Netis MW5360 routers via the password parameter on the login page. The exploit uses base64-encoded commands to achieve remote code execution.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Netis MW5360 router firmware versions up to V1.0.1.3442
No auth needed
Prerequisites: Network access to the target router · Router must be running vulnerable firmware
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Nuclei Templates (1)

Netis MW5360 V1.0.1.3031 - Command Injection
CRITICALby pussycat0x
Shodan: title:"netis router"

References (1)

Core 1

Scores

CVSS v3 9.8
EPSS 0.7098
EPSS Percentile 99.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact total

Details

VulnCheck KEV 2024-06-27
CWE
CWE-77
Status published
Products (1)
netis-systems/mw5360_firmware 1.0.1.3031
Published Jan 25, 2024
Tracked Since Feb 18, 2026