PT-2026-5843 · Netis · Netis E1+

Besim Altinok · Publicado 2026-02-03 · Atualizado 2026-02-03 · CVE-2020-37093

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Netis E1+ version 1.2.32533

Description An information disclosure issue exists that allows unauthenticated attackers to retrieve WiFi passwords. Attackers can send a GET request to the ''netcore get.cgi'' endpoint to extract sensitive network credentials, including SSID and WiFi passwords, in plain text. The netcore get.cgi endpoint is the point of access for this information disclosure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-201

Identificadores relacionados

CVE-2020-37093

Produtos afetados

Netis E1+

Referências · 5

• 🔥 https://exploit-db.com/exploits/48384 · Exploit
• https://t.me/CVEtracker/43647 · Publicação no Telegram
• https://vulncheck.com/advisories/netis-e-unauthenticated-wifi-password-leak · Nota
• http://netis-systems.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2020-37093 · Nota de Segurança