Approved changes feed: RSS · Atom
cpe:2.3:a:netis_systems:nx10:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Netis Systems (590cd947-9375-5979-9c6b-0adab0680cf0) |
|---|---|
| Product | Nx10 (c012fb9b-4d31-515f-8664-73bfdba7b446) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-61517 |
vulnerable | 2026-09-16 04:32:44.800715 |
Netis NX10 OS Command Injection via Ping Diagnostic Handler
HIGH (7.2)
Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an OS command injection vulnerability in the ping diagnostic handler that allows authenticated administrators to execute arbitrary shell commands as root by injecting into the IpAddr parameter. The parameter is interpolated directly into a shell command executed through system() with an incomplete denylist that only blocks spaces, pipes, semicolons, and ampersands, leaving command substitution and alternate field separator expansion available for exploitation.
Published: 2026-09-08T14:27:45.829Z
Updated: 2026-09-10T13:50:13.041Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-61516 |
vulnerable | 2026-09-16 04:32:44.676187 |
Netis NX10 Credential Disclosure via sysinfo Diagnostic Endpoint
CRITICAL (9.8)
Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the administrator password by sending a request to the sysinfo action in the web management interface without a valid session. Attackers can replay the exposed credential against the login handler to establish a fully authenticated administrator session on the device.
Published: 2026-09-08T14:23:57.088Z
Updated: 2026-09-19T14:21:56.819Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.