PT-2024-10066 · Netis · Netis Wifi 11Ac Router Nc63+4

Published 2024-12-27 · Updated 2025-01-08 · CVE-2024-48455

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Netis Wifi6 Router NX10 versions 2.0.1.3643 through 2.0.1.3582 Netis Wifi 11AC Router NC65 version 3.0.0.3749 Netis Wifi 11AC Router NC63 versions 3.0.0.3327 through 3.0.0.3503 Netis Wifi 11AC Router NC21 versions 3.0.0.3800 through 3.0.0.3329 Netis Wifi Router MW5360 versions 1.0.1.3442 through 1.0.1.3031

Description The issue is related to insufficient protection of service data in the web interface of Netis Wi-Fi routers. This allows a remote attacker to obtain sensitive information via the mode name and wl link parameters of the skk get.cgi component. There is no information about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

Recommendations For Netis Wifi6 Router NX10 versions 2.0.1.3643 and 2.0.1.3582, consider disabling the skk get.cgi component until a patch is available. For Netis Wifi 11AC Router NC65 version 3.0.0.3749, restrict access to the skk get.cgi component to minimize the risk of exploitation. For Netis Wifi 11AC Router NC63 versions 3.0.0.3327 through 3.0.0.3503, avoid using the mode name and wl link parameters in the affected API endpoint until the issue is resolved. For Netis Wifi 11AC Router NC21 versions 3.0.0.3800 through 3.0.0.3329, consider temporarily disabling the skk get.cgi component until a patch is available. For Netis Wifi Router MW5360 versions 1.0.1.3442 through 1.0.1.3031, restrict access to the vulnerable module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2025-00204

CVE-2024-48455

Affected Products

Netis Wifi 11Ac Router Nc21

Netis Wifi 11Ac Router Nc63

Netis Wifi 11Ac Router Nc65

Netis Wifi Router Mw5360

Netis Wifi6 Router Nx10

References · 13

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/netis_unauth_rce_cve_2024_48456_and_48457.rb · Exploit
• 🔥❌ https://github.com/users/h00die-gr3y/projects/1/views/1?pane=issue&itemId=92065458&issue=h00die-gr3y%7Ch00die-gr3y%7C2 · Exploit, Deleted
• https://bdu.fstec.ru/vul/2025-00204 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-48455 · Security Note
• ❌ https://github.com/users/h00die-gr3y/projects/1/views/1?pane=issue&itemId=92065458&issue=h00die-gr3y%7Ch00die-gr3y%7C2 · Note, Deleted
• https://twitter.com/the_yellow_fall/status/1876808771894153272 · Twitter Post
• https://twitter.com/TweetThreatNews/status/1877020303424950461 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1876465171566100944 · Twitter Post
• https://twitter.com/CVEnew/status/1876385859269714209 · Twitter Post
• https://vuldb.com/de/?id.290344 · Note
• https://twitter.com/TMJIntel/status/1877034028940820877 · Twitter Post
• ❌ https://github.com/users/h00die-gr3y/projects/1/views/1 · Note, Deleted
• https://t.me/cvedetector/14417 · Telegram Post