Approved changes feed: RSS · Atom
cpe:2.3:a:netis_systems:wf2220:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Netis Systems (590cd947-9375-5979-9c6b-0adab0680cf0) |
|---|---|
| Product | Wf2220 (8271346f-a1f3-57f8-a9ca-1d1e2853c05f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-3759 |
vulnerable | 2026-06-08 07:23:09.845920 |
Missing Authentication for Changing Device Configuration in WF2220
Endpoint /cgi-bin-igd/netcore_set.cgi which is used for changing device configuration is accessible without authentication. This poses a significant security threat allowing for e.g: administrator account hijacking or AP password changing.
The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-05-08T10:05:07.131Z
Updated: 2025-05-08T13:40:38.421Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3758 |
vulnerable | 2026-06-08 07:23:09.845563 |
Exposure of Device Configuration without Authentication in WF2220
WF2220 exposes endpoint /cgi-bin-igd/netcore_get.cgi that returns configuration of the device to unauthorized users. Returned configuration includes cleartext password.
The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-05-08T10:05:00.716Z
Updated: 2025-10-03T08:57:29.206Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.