Description
Netis WF2780存在命令注入漏洞，此漏洞是由于netcore_set.cgi接口对用户的请求验证不当导致的。
Netis WF2780 CVE-2024-25850 命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-25850
https://github.com/advisories/GHSA-jmpf-9fgv-p5cr
https://cn-sec.com/archives/2647495.html
https://cve.imfht.com/detail/CVE-2024-25850?lang=en
https://www.cvedetails.com/cve/CVE-2024-25850/
https://vulners.com/cve/CVE-2024-25850
https://vuldb.com/?id.254534
https://access.redhat.com/security/cve/cve-2024-25850
https://www.cve.org/CVERecord?id=CVE-2024-25850
https://app.opencve.io/cve/?product=wf2780_firmware&vendor=netis-systems