critical9.8
CVE-2021-26747
Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution.
Impact
Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netis-Systems | Wf2780 Firmware | Version 2.3.40404 |
| Netis-Systems | Wf2411 Firmware | Version 1.1.29629 |