wf2409e vulnerabilities

2 known vulnerabilities in wf2409e from Netis-systems. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  wf2409e: Use of Hard-coded Credentials

  CVE-2023-42336Sep 16, 2023Netis-systemsEPSS 1.29%

  An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via the password parameter in the /etc/shadow.sample component.

• 8.8 High severity

  wf2409e: Improper Neutralization of Special Elements used in a Command

  CVE-2023-38829Sep 11, 2023Netis-systemsEPSS 2.41%

  An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of the diagnostic tools component in the admin management interface.