← Volver a CVEs
CVE-2021-26747
CRITICAL9.8
Descripcion
Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution.
Detalles CVE
Puntuacion CVSS v3.19.8
SeveridadCRITICAL
Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vector de ataqueNETWORK
ComplejidadLOW
Privilegios requeridosNONE
Interaccion usuarioNONE
Publicado2/18/2021
Ultima modificacion11/21/2024
Fuentenvd
Avistamientos honeypot0
Productos afectados
netis-systems:wf2411netis-systems:wf2411_firmwarenetis-systems:wf2780netis-systems:wf2780_firmware
Debilidades (CWE)
CWE-78
Referencias
http://www.netis-systems.com.tw/(cve@mitre.org)
https://github.com/yhstar00/netis-route(cve@mitre.org)
http://www.netis-systems.com.tw/(af854a3a-2127-422b-91ae-364da2661108)
https://github.com/yhstar00/netis-route(af854a3a-2127-422b-91ae-364da2661108)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.