Netis-systems Wf2419 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Netis-systems Wf2419 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2018-6391 — CVSS 8.8 (high): A cross-site request forgery web vulnerability has been discovered on Netis WF2419 V2.2.36123 devices. A remote attacker is able to delete…
• CVE-2019-19356 — CVSS 7.5 (high) — actively exploited: Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. The vulnerability…
• CVE-2018-5967 — CVSS 5.4 (medium): Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page.
• CVE-2018-6190 — CVSS 5.4 (medium): Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page.