PT-2025-13559 · Netis · Netis Wf-2404

Scoozi · Published 2025-03-28 · Updated 2025-04-17 · CVE-2025-2921

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Medium

Base vector

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Netis WF-2404 version 1.1.124EN

Description A critical issue has been discovered, affecting an unknown function of the file /etc/passwd. The manipulation with the input Realtek leads to the use of a default password. It is possible to launch the attack on the physical device. The complexity of an attack is rather high, and the exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.

Recommendations For Netis WF-2404 version 1.1.124EN, consider changing the default password to a strong, unique password to mitigate the risk of exploitation. As a temporary workaround, restrict physical access to the device until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-1393

Related Identifiers

CVE-2025-2921

Affected Products

Netis Wf-2404

References · 10

• 🔥 https://scoozi.substack.com/p/hacking-a-netis-wf-2404-router-cont · Exploit
• https://osv.dev/vulnerability/CVE-2025-2921 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-2921 · Security Note
• https://twitter.com/CVEnew/status/1905787781143548155 · Twitter Post
• https://t.me/cvedetector/21458 · Telegram Post
• https://twitter.com/dailycve/status/1912900169672032443 · Twitter Post
• https://t.me/cvetracker/20212 · Telegram Post
• https://vuldb.com/?id.301896 · Note
• https://vuldb.com/?ctiid.301896 · Note
• https://vuldb.com/?submit.521038 · Note