Vulnerabilities

TI-2019-13967 CVE-2019-19356 · GHSA-ch88-rxpc-5c5r

Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through…

CRITICAL 92KEV

Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.28075 Published 2020-02-07 No fix listed CWE-78

TI-2018-04707 CVE-2018-6391 · GHSA-2r86-v6pg-m26j

MEDIUM 40

A cross-site request forgery web vulnerability has been discovered on Netis WF2419 V2.2.36123 devices.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00955 Published 2018-01-29 No fix listed CWE-352

TI-2018-04336 CVE-2018-5967 · GHSA-w23h-9hfr-j5gp

LOW 26

Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00672 Published 2018-01-25 No fix listed CWE-79

TI-2018-04548 CVE-2018-6190 · GHSA-7wg6-fj88-rp5r

LOW 28

Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01579 Published 2018-01-24 No fix listed CWE-79