PT-2025-13565
CVE-2025-2922
·
Published
2025-03-28
·
Updated
2025-03-29
Description by
CVSS 2.0
1.2
LowMetricsAV:L/AC:H/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Netis WF-2404 version 1.1.124EN
Description
A problematic issue was found in the BusyBox Shell component, leading to cleartext storage of sensitive information. The attack can be launched on the physical device and has a high complexity, making exploitation difficult. The exploit has been publicly disclosed, and the vendor was contacted but did not respond.
Recommendations
For Netis WF-2404 version 1.1.124EN, at the moment, there is no information about a newer version that contains a fix for this issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾