CVE-2024-25850

The vulnerability lies in the wps_ap_ssid5g parameter, which is not properly validated before being passed to the system command interpreter (CWE-77: command injection). An attacker can craft a malicious network request containing embedded system commands in the value of the wps_ap_ssid5g parameter. Since the attack vector is network-based, it does not require authentication or user interaction, enabling remote attacks over the Internet or local network.

An attacker can gain full control of the device by executing arbitrary system commands, resulting in a breach of confidentiality, integrity, and availability of the device and the supported network.

Apply patches available from the manufacturer according to the references. As an interim risk mitigation measure, it is recommended to isolate the device from untrusted network traffic (e.g., restrict access to the administration panel through a firewall) until the firmware update is deployed.

Netis WF2780 firmware version v2.1.40144