CVE-2024-25851

Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the config_sequence parameter in other_para of cgitest.cgi.

CVSS

No CVSS.

References

Link	Resource
https://github.com/no1rr/Vulnerability/blob/master/netis/other_para_config_sequence.md	Exploit
https://github.com/no1rr/Vulnerability/blob/master/netis/other_para_config_sequence.md	Exploit
https://www.netis-systems.com/	Product
https://www.netis-systems.com/	Product

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:netis-systems:wf2780_firmware:2.1.40144:*:*:*:*:*:*:*

cpe:2.3:h:netis-systems:wf2780:-:*:*:*:*:*:*:*

History

03 Apr 2025, 13:18

Type	Values Removed	Values Added
References	~~() https://www.netis-systems.com/ -~~	() https://www.netis-systems.com/ - Product
References	~~() https://github.com/no1rr/Vulnerability/blob/master/netis/other_para_config_sequence.md -~~	() https://github.com/no1rr/Vulnerability/blob/master/netis/other_para_config_sequence.md - Exploit
First Time		Netis-systems wf2780 Netis-systems Netis-systems wf2780 Firmware
CPE		cpe:2.3:o:netis-systems:wf2780_firmware:2.1.40144:::::::* cpe:2.3:h:netis-systems:wf2780:-:::::::*

11 Mar 2024, 22:15

Type	Values Removed	Values Added
References	{'url': 'https://github.com/no1rr/Vulnerability/blob/master/netis/igd_wps_set_wps_ap_ssid5g.md', 'name': 'https://github.com/no1rr/Vulnerability/blob/master/netis/igd_wps_set_wps_ap_ssid5g.md', 'tags': [], 'refsource': ''}	() https://github.com/no1rr/Vulnerability/blob/master/netis/other_para_config_sequence.md -

22 Feb 2024, 15:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-02-22 15:15

Updated : 2025-04-03 13:18

NVD link : CVE-2024-25851

Mitre link : CVE-2024-25851

JSON object : View

Products Affected

netis-systems

CWE

No CWE.