CVE-2019-19356: Netis WF2419 Devices Remote Code Execution Vulnerability
High · CVSS 7.5 (CVSS 3.1)KEV known exploitedEPSS 28.1%, 98th percentilePublished Updated Assigner: mitre
In CISA’s Known Exploited Vulnerabilities catalog: Netis WF2419 Devices Remote Code Execution Vulnerability.
Added , federal remediation due . Known ransomware use: Unknown.
Required action: Apply updates per vendor instructions.
Description
Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. The vulnerability has been found in firmware version V1.2.31805 and V2.2.36123. After one is connected to this page, it is possible to execute system commands as root through the tracert diagnostic tool because of lack of user input sanitizing.
Vector CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Status incidents that name it
No tracked status incident names this CVE.
Affected vendors and products
Netis: WF2419 Devices
References
- CVE record on cve.org (opens in new tab)
- NVD entry (opens in new tab)
- packetstormsecurity.com/files/156588/Netis-WF2419-2.2.36123-Remote-Code-Execution.html (opens in new tab)
- github.com/shadowgatt/CVE-2019-19356 (opens in new tab)
- www.digital.security/en/blog/netis-routers-remote-code-execution-cve-2019-19356 (opens in new tab)
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)