PT-2025-33031 · Netis · Netis Wf2880

Published 2025-08-13 · Updated 2025-08-14 · CVE-2025-50615

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Netis WF2880 version 2.1.40207

Description: A buffer overflow issue exists in the FUN 00470c50 function of the cgitest.cgi file. An attacker can trigger this issue by controlling the wl mac filter set value within the payload, potentially leading to a Denial of Service (DoS) attack.

Recommendations: Update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to the cgitest.cgi file to minimize the risk of exploitation.

Exploit

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2025-50615

Affected Products

Netis Wf2880

References · 6

• 🔥 https://github.com/Chinesexilinyu/Netis-WF2880-cgitest.cgi-Vulnerability/tree/main/8 · Exploit
• https://osv.dev/vulnerability/CVE-2025-50615 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-50615 · Security Note
• https://t.me/CVEtracker/29905 · Telegram Post
• https://twitter.com/CVEnew/status/1955686462604624112 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1955808181415768153 · Twitter Post