Netis-systems N3m Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Netis-systems N3m Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2023-43893 — CVSS 9.8 (critical): Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the wakeup_mac parameter in the Wake-On-LAN (WoL)…
• CVE-2023-45465 — CVSS 9.8 (critical): Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ddnsDomainName parameter in the Dynamic DNS…
• CVE-2023-45467 — CVSS 9.8 (critical): Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ntpServIP parameter in the Time Settings.
• CVE-2023-43891 — CVSS 9.8 (critical): Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the Changing Username and Password function. This…
• CVE-2023-43892 — CVSS 9.8 (critical): Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the WAN settings. This…
• CVE-2023-43890 — CVSS 8.8 (high): Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the diagnostic tools page. This vulnerability is…
• CVE-2023-45468 — CVSS 7.5 (high): Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the pingWdogIp. This vulnerability allows attackers to cause a…
• CVE-2023-44860 — CVSS 7.5 (high): An issue in NETIS SYSTEMS N3Mv2 v.1.0.1.865 allows a remote attacker to cause a denial of service via the authorization component in the…
• CVE-2023-45463 — CVSS 7.5 (high): Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the hostName parameter in the FUN_0040dabc function. This…
• CVE-2023-45464 — CVSS 7.5 (high): Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the servDomain parameter. This vulnerability allows attackers to…