Records68All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical19CVSS 9.0–10.0
CVSS high32CVSS 7.0–8.9
Exploited now
Netis records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsPriority HIGH 82
Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ntpServIP parameter in the Time Settings.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02217 · Published 2023-10-13 · No fix listed CWE-78
Priority HIGH 82
Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ddnsDomainName parameter in the Dynamic DNS settings.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02155 · Published 2023-10-13 · No fix listed CWE-77
Priority HIGH 82
Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the wakeup_mac parameter in the Wake-On-LAN (WoL) function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02244 · Published 2023-10-02 · No fix listed CWE-78
Priority HIGH 82
Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the WAN settings.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02244 · Published 2023-10-02 · No fix listed CWE-78
Priority HIGH 82
Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the Changing Username and Password function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02244 · Published 2023-10-02 · No fix listed CWE-77
Priority HIGH 73
Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the diagnostic tools page.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02845 · Published 2023-10-02 · No fix listed CWE-78
Priority HIGH 72
Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the pingWdogIp.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00815 · Published 2023-10-13 · No fix listed CWE-120
Priority HIGH 72
Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the servDomain parameter.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00744 · Published 2023-10-13 · No fix listed CWE-120
Priority HIGH 72
An issue in NETIS SYSTEMS N3Mv2 v.1.0.1.865 allows a remote attacker to cause a denial of service via the authorization component in the HTTP request.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.22714 · Published 2023-10-06 · No fix listed CWE-863
Priority MEDIUM 40
Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the hostName parameter in the FUN_0040dabc function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00744 · Published 2023-10-13 · No fix listed CWE-120
THREATIST.IORead the docs