Vulnerabilities

TI-2025-32187 CVE-2025-50635 · GHSA-p6xg-3q2x-vvrw

A null pointer dereference vulnerability was discovered in Netis WF2780 v2.2.35445.

HIGH 72

A null pointer dereference vulnerability was discovered in Netis WF2780 v2.2.35445.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0044 Published 2025-08-13 No fix listed CWE-476

TI-2024-16977 CVE-2024-25851 · GHSA-c8f7-r83w-637g

HIGH 70

Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the config_sequence parameter in other_para of cgitest.cgi.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.01936 Published 2024-02-22 No fix listed CWE-78

TI-2024-16976 CVE-2024-25850 · GHSA-jmpf-9fgv-p5cr

HIGH 82

Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the wps_ap_ssid5g parameter

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.19074 Published 2024-02-22 No fix listed CWE-77

TI-2021-08420 CVE-2021-26747 · GHSA-w38f-4qh6-g599

HIGH 75

Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.54777 Published 2021-02-18 No fix listed CWE-78