CVE-2024-25851

HIGH

Netis WF2780 v2.1.40144 - OS Command Injection via config_sequence Parameter

Title source: llm

Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the config_sequence parameter in other_para of cgitest.cgi.

Core 2

Core References

Exploit

Product

CVSS v3 8.0

EPSS 0.0194

EPSS Percentile 77.6%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

CWE

CWE-78

Status published

Products (1)

netis-systems/wf2780_firmware 2.1.40144

Published Feb 22, 2024

Tracked Since Feb 18, 2026