NE
Vendor
Netis-systems
57
CVEs
1
On KEV
0
New 30D
Products
WF8.8
Wf2419 Firmware
Netis-systems
4 CVEs1 on KEV0 new
WF9.8
Wf2880 Firmware
Netis-systems
12 CVEs0 on KEV0 new
NF9.8
N3m Firmware
Netis-systems
10 CVEs0 on KEV0 new
DF8.8
Dl4343 Firmware
Netis-systems
7 CVEs0 on KEV0 new
WF9.8
Wf2780 Firmware
Netis-systems
4 CVEs0 on KEV0 new
MF9.8
Mex605 Firmware
Netis-systems
3 CVEs0 on KEV0 new
NR9.8
Netcore Router Firmware
Netis-systems
3 CVEs0 on KEV0 new
NC9.8
NC63
Netis Systems
2 CVEs0 on KEV0 new
NW6.8
Netis Wf-2404 Firmware
Netis-systems
2 CVEs0 on KEV0 new
NX9.8
NX10
Netis Systems
2 CVEs0 on KEV0 new
WF9.8
Wf2409e Firmware
Netis-systems
2 CVEs0 on KEV0 new
WF9.8
Wf2411 Firmware
Netis-systems
2 CVEs0 on KEV0 new
3F9.8
360r Firmware
Netis-systems
1 CVEs0 on KEV0 new
MF9.8
Mw5360 Firmware
Netis-systems
1 CVEs0 on KEV0 new
NF9.8
N3mv2 Firmware
Netis-systems
1 CVEs0 on KEV0 new
WF8.8
Wf2471 Firmware
Netis-systems
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-61517 | NX NX10 Netis Systems | 7.2 | Sep 8 | Netis NX10 OS Command Injection via Ping Diagnostic Handler |
| CVE-2026-61516 | NX NX10 Netis Systems | 9.8 | Sep 8 | Netis NX10 Credential Disclosure via sysinfo Diagnostic Endpoint |
| CVE-2026-76071 | NC NC63 Netis Systems | 9.8 | Aug 24 | Netis NC63 V3.0.0.3327 Stack Buffer Overflow via destHost Parameter |
| CVE-2026-76070 | NC NC63 Netis Systems | 9.8 | Aug 24 | Netis NC63 V3.0.0.3327 Stack Buffer Overflow via Login Password Parameter |
| CVE-2025-50617 | WF Wf2880 Firmware Netis-systems | 7.5 | Aug 13 | A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_0046ed68 function of the cgitest.cgi file |
| CVE-2025-50616 | WF Wf2880 Firmware Netis-systems | 7.5 | Aug 13 | A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_0046f984 function of the cgitest.cgi file |
| CVE-2025-50615 | WF Wf2880 Firmware Netis-systems | 7.5 | Aug 13 | A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00470c50 function of the cgitest.cgi file |
| CVE-2025-50614 | WF Wf2880 Firmware Netis-systems | 7.5 | Aug 13 | A buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the FUN_0047151c function of the cgitest.cgi file |
| CVE-2025-50613 | WF Wf2880 Firmware Netis-systems | 7.5 | Aug 13 | A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00475e1c function of the cgitest.cgi file |
| CVE-2025-50612 | WF Wf2880 Firmware Netis-systems | 7.5 | Aug 13 | A buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the FUN_004743f8 function of the cgitest.cgi file |
| CVE-2025-50611 | WF Wf2880 Firmware Netis-systems | 7.5 | Aug 13 | A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00473154 function of the cgitest.cgi file |
| CVE-2025-50610 | WF Wf2880 Firmware Netis-systems | 7.5 | Aug 13 | A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00476598 function of the cgitest.cgi file |
| CVE-2025-50609 | WF Wf2880 Firmware Netis-systems | 7.5 | Aug 13 | A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the Function_00465620 of the cgitest.cgi file |
| CVE-2025-50608 | WF Wf2880 Firmware Netis-systems | 7.5 | Aug 13 | A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00471994 function of the cgitest.cgi file |
| CVE-2025-50635 | WF Wf2780 Firmware Netis-systems | 7.5 | Aug 13 | A null pointer dereference vulnerability was discovered in Netis WF2780 v2.2.35445 |
| CVE-2025-45835 | WF Wf2880 Firmware Netis-systems | 7.5 | May 12 | A null pointer dereference vulnerability was discovered in Netis WF2880 v2.1.40207 |
| CVE-2025-2921 | NW Netis Wf-2404 Firmware Netis-systems | 6.4 | Mar 28 | A vulnerability classified as critical has been found in Netis WF-2404 1.1.124EN |
| CVE-2025-2919 | NW Netis Wf-2404 Firmware Netis-systems | 6.8 | Mar 28 | A vulnerability was found in Netis WF-2404 1.1.124EN |
| CVE-2024-33793 | MF Mex605 Firmware Netis-systems | 5.3 | May 3 | netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the ping test page |
| CVE-2024-33792 | MF Mex605 Firmware Netis-systems | 9.8 | May 3 | netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the tracert page |
| CVE-2024-33791 | MF Mex605 Firmware Netis-systems | 4.6 | May 3 | A cross-site scripting (XSS) vulnerability in netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the… |
| CVE-2024-25851 | WF Wf2780 Firmware Netis-systems | 8.0 | Feb 22 | Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the config_sequence parameter in other_para of cgitest.cgi |
| CVE-2024-25850 | WF Wf2780 Firmware Netis-systems | 9.8 | Feb 22 | Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the wps_ap_ssid5g parameter |
| CVE-2024-22729 | MF Mw5360 Firmware Netis-systems | 9.8 | Jan 25 | NETIS SYSTEMS MW5360 V1.0.1.3031 was discovered to contain a command injection vulnerability via the password parameter on the login page |
| CVE-2023-45468 | NF N3m Firmware Netis-systems | 7.5 | Oct 13 | Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the pingWdogIp |
| CVE-2023-45467 | NF N3m Firmware Netis-systems | 9.8 | Oct 13 | Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ntpServIP parameter in the Time Settings |
| CVE-2023-45466 | NF N3mv2 Firmware Netis-systems | 9.8 | Oct 13 | Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the pin_host parameter in the WPS Settings |
| CVE-2023-45465 | NF N3m Firmware Netis-systems | 9.8 | Oct 13 | Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ddnsDomainName parameter in the Dynamic DNS settings |
| CVE-2023-45464 | NF N3m Firmware Netis-systems | 7.5 | Oct 13 | Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the servDomain parameter |
| CVE-2023-45463 | NF N3m Firmware Netis-systems | 7.5 | Oct 13 | Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the hostName parameter in the FUN_0040dabc function |
| CVE-2023-44860 | NF N3m Firmware Netis-systems | 7.5 | Oct 6 | An issue in NETIS SYSTEMS N3Mv2 v.1.0.1.865 allows a remote attacker to cause a denial of service via the authorization component in the HTTP request |
| CVE-2023-43893 | NF N3m Firmware Netis-systems | 9.8 | Oct 2 | Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the wakeup_mac parameter in the Wake-On-LAN (WoL) function |
| CVE-2023-43892 | NF N3m Firmware Netis-systems | 9.8 | Oct 2 | Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the WAN settings |
| CVE-2023-43891 | NF N3m Firmware Netis-systems | 9.8 | Oct 2 | Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the Changing Username and Password function |
| CVE-2023-43890 | NF N3m Firmware Netis-systems | 8.8 | Oct 2 | Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the diagnostic tools page |
| CVE-2023-43134 | 3F 360r Firmware Netis-systems | 9.8 | Sep 20 | There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the device without authentication, obtain… |
| CVE-2023-42336 | WF Wf2409e Firmware Netis-systems | 9.8 | Sep 16 | An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via the password parameter in the… |
| CVE-2023-38829 | WF Wf2409e Firmware Netis-systems | 8.8 | Sep 11 | An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of the diagnostic tools component in the… |
| CVE-2023-0114 | NR Netcore Router Firmware Netis-systems | 5.5 | Jan 7 | A vulnerability was found in Netis Netcore Router |
| CVE-2023-0113 | NR Netcore Router Firmware Netis-systems | 7.5 | Jan 7 | A vulnerability was found in Netis Netcore Router up to 2.2.6 |
| CVE-2018-25069 | NR Netcore Router Firmware Netis-systems | 9.8 | Jan 7 | A vulnerability classified as critical has been found in Netis Netcore Router |
| CVE-2021-26747 | WF Wf2780 Firmware Netis-systems | 9.8 | Feb 18 | Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution |
| CVE-2020-8946 | WF Wf2471 Firmware Netis-systems | 8.8 | Feb 12 | Netis WF2471 v1.2.30142 devices allow an authenticated attacker to execute arbitrary OS commands via shell metacharacters in the /cgi-bin-igd/sys_log_clean.cgi log_3g_type… |
| CVE-2019-19356 In wildKEV | WF Wf2419 Firmware Netis-systems | 7.5 | Feb 7 | Netis WF2419 Devices Remote Code Execution Vulnerability |
| CVE-2019-20076 | DF Dl4343 Firmware Netis-systems | 6.1 | Dec 30 | On Netis DL4323 devices, XSS exists via the form2Ddns.cgi username parameter (DynDns settings of the Dynamic DNS Configuration) |
| CVE-2019-20075 | DF Dl4343 Firmware Netis-systems | 6.1 | Dec 30 | On Netis DL4323 devices, pingrtt_v6.html has XSS (Ping6 Diagnostic) |
| CVE-2019-20074 | DF Dl4343 Firmware Netis-systems | 8.8 | Dec 30 | On Netis DL4323 devices, any user role can view sensitive information, such as a user password or the FTP password, via the form2saveConf.cgi page |
| CVE-2019-20073 | DF Dl4343 Firmware Netis-systems | 6.1 | Dec 30 | On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter (User Account Configuration) |
| CVE-2019-20072 | DF Dl4343 Firmware Netis-systems | 6.1 | Dec 30 | On Netis DL4323 devices, XSS exists via the form2Ddns.cgi hostname parameter (Dynamic DNS Configuration) |
| CVE-2019-20071 | DF Dl4343 Firmware Netis-systems | 6.5 | Dec 30 | On Netis DL4323 devices, CSRF exists via form2logaction.cgi to delete all logs |
| CVE-2019-20070 | DF Dl4343 Firmware Netis-systems | 6.1 | Dec 30 | On Netis DL4323 devices, XSS exists via the urlFQDN parameter to form2url.cgi (aka the Keyword field of the URL Blocking Configuration) |
| CVE-2019-8985 | WF Wf2411 Firmware Netis-systems | 9.8 | Feb 21 | On Netis WF2411 with firmware 2.1.36123 and other Netis WF2xxx devices (possibly WF2411 through WF2880), there is a stack-based buffer overflow that does not require… |
| CVE-2018-6391 | WF Wf2419 Firmware Netis-systems | 8.8 | Jan 29 | A cross-site request forgery web vulnerability has been discovered on Netis WF2419 V2.2.36123 devices |
| CVE-2018-5967 | WF Wf2419 Firmware Netis-systems | 5.4 | Jan 25 | Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page |
| CVE-2018-6190 | WF Wf2419 Firmware Netis-systems | 5.4 | Jan 24 | Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page |
