CVE-2025-2920

Name of the Vulnerable Software and Affected Versions Netis WF-2404 version 1.1.124EN

Description A vulnerability was found in the processing of the file /etc/passwd, which leads to the use of a weak hash. The complexity of an attack is rather high, and the exploitation is known to be difficult. However, the exploit has been disclosed to the public and may be used. The attack can be launched on the physical device.

Recommendations For Netis WF-2404 version 1.1.124EN, as a temporary workaround, consider restricting access to the /etc/passwd file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.