CVE-2024-25850

CRITICAL

Netis-systems Wf2780 Firmware - Command Injection

Title source: rule

Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the wps_ap_ssid5g parameter

Core 2

Core References

Exploit

Product

CVSS v3 9.8

EPSS 0.1315

EPSS Percentile 94.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact total

CWE

CWE-77

Status published

Products (1)

netis-systems/wf2780_firmware 2.1.40144

Published Feb 22, 2024

Tracked Since Feb 18, 2026