CVE-2024-25850

CRITICAL

Netis WF2780 v2.1.40144 - OS Command Injection via wps_ap_ssid5g Parameter

Title source: llm

Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the wps_ap_ssid5g parameter

Core 2

Core References

Exploit

Product

CVSS v3 9.8

EPSS 0.1907

EPSS Percentile 97.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact total

CWE

CWE-77

Status published

Products (1)

netis-systems/wf2780_firmware 2.1.40144

Published Feb 22, 2024

Tracked Since Feb 18, 2026