Vulnerabilities > Netis Systems > Wf2411 Firmware

DATE CVE VULNERABILITY TITLE RISK
2021-02-18 CVE-2021-26747 OS Command Injection vulnerability in Netis-Systems Wf2411 Firmware and Wf2780 Firmware
Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution.
network
low complexity
netis-systems CWE-78
critical
10.0
2019-02-21 CVE-2019-8985 Missing Authentication for Critical Function vulnerability in Netis-Systems Wf2411 Firmware and Wf2880 Firmware
On Netis WF2411 with firmware 2.1.36123 and other Netis WF2xxx devices (possibly WF2411 through WF2880), there is a stack-based buffer overflow that does not require authentication.
network
low complexity
netis-systems CWE-306
critical
9.0