Vulnerabilities > Netis Systems > Wf2419 Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2020-02-07 CVE-2019-19356 OS Command Injection vulnerability in Netis-Systems Wf2419 Firmware 1.2.31805/2.2.36123
Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page.
network
high complexity
netis-systems CWE-78
7.5
7.5
2018-01-29 CVE-2018-6391 Cross-Site Request Forgery (CSRF) vulnerability in Netis-Systems Wf2419 Firmware 2.2.36123
A cross-site request forgery web vulnerability has been discovered on Netis WF2419 V2.2.36123 devices.
network
low complexity
netis-systems CWE-352
8.8
8.8